BlogEngine.NET 3.3.7.0 allows /api/filemanager local file inclusion via the path parameter
View the template here CVE-2019-10717.yaml
echo "$URL" | nuclei -t ~/nuclei-templates/http/cves/2019/CVE-2019-10717.yaml
References: