Security Advisory
CVE-2013-6953
CVE vulnerability detail - eXtreme Datacenter Security Operations
Description
BlogEngine.NET 2.8.0.0 and earlier allows remote attackers to read usernames and password hashes via a request for the sioc.axd file.