2 matches found
Code injection
The DNNArticle module 11 for DNN formerly DotNetNuke allows remote attackers to read the web.config file, and consequently discover database credentials, via the /GetCSS.ashx/?CP=%2fweb.config URI...
5CVSS9.3AI score0.48907EPSS
SaveExploits5References2Affected Software1
CVE-2018-9126: Exposure of Sensitive Information to an Unauthorized Actor
The DNNArticle module 11 for DNN formerly DotNetNuke allows remote attackers to read the web.config file, and consequently discover database credentials, via the /GetCSS.ashx/?CP=%2fweb.config URI...
9.8CVSS8.2AI score0.48907EPSS
SaveExploits5References2
20