Comments Security Hole in BlogEngine.NET 1.4

home
asp.net
view story

11 Kicks

Comments Security Hole in BlogEngine.NET 1.4(jvance.com)

submitted by JarrettV(270) 3 years, 7 months ago

Jarrett describes the steps to reproduce a security hole in BlogEngine.NET for deleting and approving comments. He also provides the source code for a quick fix.

4 comments |category: ASP.NET |Views: 155
Tweet

tags: ASP.NET another

Everyones tags:

Your Tags:

Please login or signup.

Add a live kick counter to your blog >> liveImage

You can even customize the image by choosing your own colors, and then clicking the button below to update the preview and the html code:

"Kick It" text
"Kick It" background
kick count text
kick count background
border

Simply copy and paste this HTML into your blog post.

Users who kicked this story:

mdopp(856) -

craigtp(683) -

DannyDouglass(1260) -

diamondz(65)

More who kicked this story...

Comments:

posted by Dexign(170) 3 years, 7 months ago 0

This is at least the second time that someone has documented the exact steps to exploiting a security hole in BlogEngine. Why?? Anyway, looks like a fix has already been posted on CodePlex.

posted by keyvan(4086) 3 years, 7 months ago 0

It was better to not produce the steps on how to reproduce it.

posted by madskristensen(8565) 3 years, 7 months ago 0

Get the fix here http://www.codeplex.com/blogengine/Release/ProjectReleases.aspx

posted by duckie(150) 3 years, 7 months ago 0

Excuse me, but IMHO it is nothing more than publicity-whoring to write a post such as this one.

Next time, if you find a exploit, report it to the admin, and give him time to fix it in silence. Thank you.

Most Active Users

What's this?