CVE-2013-6953 Information disclosure in n/a

What is CVE-2013-6953?

CVE-2013-6953 is a medium-severity vulnerability in n/a, published on 2 Jan 2014. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

BlogEngine.NET 2.8.0.0 and earlier allows remote attackers to read usernames and password hashes via a request for the sioc.axd file.

Weakness: CWE-200

Which versions are affected by CVE-2013-6953?

It affects 1 product.

Products include Dotnetblogengine Blogengine.net.

How do I fix CVE-2013-6953?

No fix has been published for CVE-2013-6953 yet. Limit exposure of the affected software until one is available.

Is CVE-2013-6953 being exploited?

There is no known exploitation of CVE-2013-6953 in the wild and no public exploit code.

Other vulnerabilities in n/a

• CVE-2019-10719 Path traversal in n/a High 8.8
• CVE-2019-10718 XML external entity in n/a High 7.5
• CVE-2019-11392 XML external entity in n/a High 7.5
• CVE-2019-10717 Path traversal in n/a High 7.1
• CVE-2019-10721 Open redirect in n/a Medium 6.1

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-rh3h-42rr-fhm7.