DNN CATALooK.netStore Module Cross-Site Scripting Vulnerability

DNN formerly known as DotNetNuke is a set of U.S. DNN by Microsoft support , based on the ASP.NET platform for open source content management system CMS. The system is easy to install , scalable , feature-rich features such as CATALooK.netStore module is one of the CATALooK store module . A...

DotNetNuke 7.2.8 CATALooKStore Cross Site Scripting

Title: DotNetNuke CATALooKStore Cross Site Scripting XSS + Date: 2018/04/15 + Author: Mostafa Gharzi + Team: Maher - CertCC.ir + Vendor Homepage: www.dnnsoftware.com + Tested on: Windows 10 & Kali Linux + Versions: 7.2.8 and Before + Vulnerable Parameter: Get Method + Vulnerable File:...

CVE-2018-10138

The CATALooK.netStore module through 7.2.8 for DNN formerly DotNetNuke allows XSS via the /ViewEditGoogleMaps.aspx PortalID or CATSkin parameter, or the /ImageViewer.aspx link or desc parameter...

CVE-2018-10138

The CVE-2018-10138 entry affects the CATALooK.netStore module for DotNetNuke/DNN up to version 7.2.8. The vulnerability is a cross-site scripting (XSS) flaw exploitable via user-controlled input in the /ViewEditGoogleMaps.aspx (PortalID or CATSkin parameter) or /ImageViewer.aspx (link or desc par...

DotNetNuke DNNarticle Module 11 - Directory Traversal

DotNetNuke DNNarticle Module 11 - Directory Traversal 01. Advisory Information Title: Directory Traversal Vulnerability in DNNarticle module Date published: n/a Date of last update: n/a Vendors contacted: zldnn.com Discovered by: Esmaeil Rahimian Severity: Critical 02. Vulnerability Information...

CVE-2018-9126

CVE-2018-9126 affects the DNNArticle module 11 for DotNetNuke. The vulnerability allows remote attackers to read the web.config via the URI /GetCSS.ashx/?CP=%2fweb.config, exposing database credentials and other config data. Exploit references exist (Exploit-DB, PacketStorm), confirming in-the-wi...

DotNetNuke DreamSlider 01.01.02 - Arbitrary File Download (Metasploit)

Exploit Title: DotNetNuke DreamSlider Arbitrary File Download Date: 23/01/2014 Author: Glafkos Charalambous Version: 01.01.02 Vendor: DreamSlider Vendor URL: http://www.dreamslider.com/ Google Dork: inurl:/DesktopModules/DreamSlider/ CVE: Description DotNetNuke DreamSlider Module prior to version...

DotNetNuke DreamSlider 01.01.02 - Arbitrary File Download Exploit

Exploit for asp platform in category web applications Exploit Title: DotNetNuke DreamSlider Arbitrary File Download Date: 23/01/2014 Author: Glafkos Charalambous Version: 01.01.02 Vendor: DreamSlider Vendor URL: http://www.dreamslider.com/ Google Dork: inurl:/DesktopModules/DreamSlider/ CVE:...

DotNetNuke DreamSlider 01.01.02 - Arbitrary File Download (Metasploit)

DotNetNuke DreamSlider 01.01.02 - Arbitrary File Download Metasploit Exploit Title: DotNetNuke DreamSlider Arbitrary File Download Date: 23/01/2014 Author: Glafkos Charalambous Version: 01.01.02 Vendor: DreamSlider Vendor URL: http://www.dreamslider.com/ Google Dork:...

DotNetNuke DreamSlider 01.01.02 Arbitrary File Download

Exploit Title: DotNetNuke DreamSlider Arbitrary File Download Date: 23/01/2014 Author: Glafkos Charalambous Version: 01.01.02 Vendor: DreamSlider Vendor URL: http://www.dreamslider.com/ Google Dork: inurl:/DesktopModules/DreamSlider/ CVE: Description DotNetNuke DreamSlider Module prior to version...

DNN Cookie Deserialization Remote Code Execution (CVE-2017-9822)

An object deserialization vulnerability exists in DotNetNuke web content management system. A remote unauthenticated attacker may exploit this vulnerability by sending a crafted file to the web application...

DotNetNuke Remote Code Execution Vulnerability

DotNetNuke DNN is a set of U.S. DNN company supported by Microsoft , based on the ASP.NET platform for open source content management system CMS. The system is easy to install , scalable , feature-rich and so on. A security vulnerability exists in versions of DotNetNuke prior to 9.1.1. A remote...

Remote code execution

DNN aka DotNetNuke before 9.1.1 has Remote Code Execution via a cookie, aka "2017-08 Critical Possible remote code execution on DNN sites."...

CVE-2017-9822

DNN aka DotNetNuke before 9.1.1 has Remote Code Execution via a cookie, aka "2017-08 Critical Possible remote code execution on DNN sites."...

CVE-2017-9822

DotNetNuke (DNN) cookie deserialization RCE (CVE-2017-9822) affects DNN before 9.1.1. The vulnerability arises from deserializing a crafted DNNPersonalization-like cookie, enabling remote code execution. Exploitation details and public proof points are documented in exploit references (e.g., Meta...

DotNetNuke Cookie Deserialization Remote Code Excecution

This module exploits a deserialization vulnerability in DotNetNuke DNN versions 5.0.0 to 9.3.0-RC. Vulnerable versions store profile information for users in the DNNPersonalization cookie as XML. The expected structure includes a "type" attribute to instruct the server which type of object to...

PT-2017-4164 · Dnn · Dnn

Name of the Vulnerable Software and Affected Versions: DNN aka DotNetNuke versions prior to 9.1.1 Description: The issue is related to insufficient protection of cookies, which can be exploited to gain unauthorized access to protected information and execute arbitrary code. This can be achieved...

DNN (DotNetNuke) < 7.4.1 Administration Authentication Bypass Vulnerability

The version of DNN formerly DotNetNuke running on the remote web server is prior to 7.4.1. It is, therefore, affected by an authentication bypass vulnerability due to a failure to delete installation wizard scripts post-installation. An unauthenticated, remote attacker can exploit this, via a...

U.S. Dept Of Defense: Arbitary file download vulnerability on a DoD website

A DoD website was misconfigured in a manner that could have allowed an attacker to collect sensitive information about the web application or system. @psychomantis was able to demonstrate this vulnerability by crafting a specially formatted URL. Thank you for notifying us of this vulnerability!...

U.S. Dept Of Defense: Arbitary file download vulnerability on a DoD website

A DoD website was misconfigured in a manner that could have allowed an attacker to collect sensitive information about the web application and system. @psychomantis was able to demonstrate this vulnerability by crafting a specially formatted URL. Thank you for notifying us of this vulnerability!...