Blogengine.net released a new security patch, since danny douglass reported a security issue. You can get the new version 1.3.1.0 or patch for the latest stable version 1.3.0.0 here. This is very very critical, dont forget to patch your blog if you are using Blogengine.net. This can expose your username and password to anybody.