CVEDB API

BlogEngine.NET 2.8.0.0 and earlier allows remote attackers to read usernames and password hashes via a request for the sioc.axd file.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.003

EPSS Ranking 55.9%

CVSS Severity

CVSS v2 Score 5.0

References

Products affected by CVE-2013-6953

Dotnetblogengine » Blogengine.net » Version: 1.4.5

cpe:2.3:a:dotnetblogengine:blogengine.net:1.4.5
Dotnetblogengine » Blogengine.net » Version: 1.5

cpe:2.3:a:dotnetblogengine:blogengine.net:1.5
Dotnetblogengine » Blogengine.net » Version: 1.6

cpe:2.3:a:dotnetblogengine:blogengine.net:1.6
Dotnetblogengine » Blogengine.net » Version: 2.0

cpe:2.3:a:dotnetblogengine:blogengine.net:2.0
Dotnetblogengine » Blogengine.net » Version: 2.5

cpe:2.3:a:dotnetblogengine:blogengine.net:2.5
Dotnetblogengine » Blogengine.net » Version: 2.6

cpe:2.3:a:dotnetblogengine:blogengine.net:2.6
Dotnetblogengine » Blogengine.net » Version: 2.7

cpe:2.3:a:dotnetblogengine:blogengine.net:2.7
Dotnetblogengine » Blogengine.net » Version: 2.8

cpe:2.3:a:dotnetblogengine:blogengine.net:2.8