Lucene search
HistoryMar 12, 2014 - 2:55 p.m.
CVE-2013-5117
sql injection
vulnerability
zldnn
dnnarticle
rss
dotnetnuke
cve-2013-5117
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
8.4 High
AI Score
Confidence
Low
0.002 Low
EPSS
Percentile
59.2%
SQL injection vulnerability in the RSS page (DNNArticleRSS.aspx) in the ZLDNN DNNArticle module before 10.1 for DotNetNuke allows remote attackers to execute arbitrary SQL commands via the categoryid parameter.
Affected configurations
Node
zldnndnnarticleRangeβ€10.0
| CPE | Name | Operator | Version |
|---|---|---|---|
| zldnn:dnnarticle | zldnn dnnarticle | le | 10.0 |
Related
zdt
zdt
DotNetNuke DNNArticle Module 10.0 - SQL Injection Vulnerability
2013-08-15 00:00:00
openvas
openvas
DotNetNuke < 10.1 DNNArticle Module SQLi Vulnerability
2013-08-19 00:00:00
nvd
nvd
CVE-2013-5117
2014-03-12 14:55:30
seebug
seebug
DotNetNuke DNNArticle樑ε'categoryid'εζ°SQL注ε
₯ζΌζ΄
2013-08-27 00:00:00
DotNetNuke DNNArticle Module 10.0 - SQL Injection Vulnerability
2014-07-01 00:00:00
checkpoint_advisories
checkpoint_advisories
DotNetNuke DNNArticle Module SQL Injection (CVE-2013-5117)
2014-11-10 00:00:00
prion
prion
Sql injection
2014-03-12 14:55:00
nessus
nessus
DNN (DotNetNuke) DNNArticle Module categoryid Parameter SQL Injection
2013-08-16 00:00:00
packetstorm
packetstorm
DotNetNuke DNNArticle 10.0 SQL Injection
2013-08-14 00:00:00
cvelist
cvelist
CVE-2013-5117
2014-03-12 14:00:00
exploitpack
exploitpack
DotNetNuke DNNArticle Module 10.0 - SQL Injection
2013-08-15 00:00:00
exploitdb
exploitdb
DotNetNuke DNNArticle Module 10.0 - SQL Injection
2013-08-15 00:00:00
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
8.4 High
AI Score
Confidence
Low
0.002 Low
EPSS
Percentile
59.2%
Related for CVE-2013-5117