766 matches found
PT-2018-3765 · Dnn · Dnn
Name of the Vulnerable Software and Affected Versions: DNN aka DotNetNuke versions 9.2 through 9.2.2 Description: The issue is related to the use of a weak encryption algorithm to protect input parameters, which could allow a remote attacker to gain unauthorized access to protected information...
PT-2018-3764 · Dnn · Dnn
Name of the Vulnerable Software and Affected Versions: DNN aka DotNetNuke versions 9.2 through 9.2.1 Description: The issue is related to the use of a weak encryption algorithm to protect input parameters, which can allow a remote attacker to gain unauthorized access to protected information...
Server-Side Request Forgery (SSRF)
DotNetNuke.Core is vulnerable to server-side request forgery SSRF attacks. The application does not properly handle images, allowing a malicious user to pass arbitrary URLs when generating an image that can allow an attacker to conduct a SSRF attack...
Server side request forgery (ssrf)
DNN aka DotNetNuke before 9.2.0 suffers from a Server-Side Request Forgery SSRF vulnerability in the DnnImageHandler class. Attackers may be able to access information about internal network resources...
CVE-2017-0929
DNN aka DotNetNuke before 9.2.0 suffers from a Server-Side Request Forgery SSRF vulnerability in the DnnImageHandler class. Attackers may be able to access information about internal network resources...
CVE-2017-0929
CVE-2017-0929 affects DotNetNuke (DNN) before 9.2.0. A Server-Side Request Forgery (SSRF) vulnerability exists in the DnnImageHandler class, enabling an attacker to access internal network resources. The issue is mitigated by upgrading DNN to version 9.2.0 or above. If exploiting details are prov...
PT-2018-5156 · Dnn · Dnn
Name of the Vulnerable Software and Affected Versions: DNN aka DotNetNuke versions prior to 9.2.0 Description: The issue allows attackers to access information about internal network resources due to a Server-Side Request Forgery SSRF vulnerability in the DnnImageHandler class. Recommendations: F...
DNN CATALooK.netStore Module Cross-Site Scripting Vulnerability
DNN formerly known as DotNetNuke is a set of U.S. DNN by Microsoft support , based on the ASP.NET platform for open source content management system CMS. The system is easy to install , scalable , feature-rich features such as CATALooK.netStore module is one of the CATALooK store module . A...
DotNetNuke 7.2.8 CATALooKStore Cross Site Scripting
Title: DotNetNuke CATALooKStore Cross Site Scripting XSS + Date: 2018/04/15 + Author: Mostafa Gharzi + Team: Maher - CertCC.ir + Vendor Homepage: www.dnnsoftware.com + Tested on: Windows 10 & Kali Linux + Versions: 7.2.8 and Before + Vulnerable Parameter: Get Method + Vulnerable File:...
CVE-2018-10138
The CATALooK.netStore module through 7.2.8 for DNN formerly DotNetNuke allows XSS via the /ViewEditGoogleMaps.aspx PortalID or CATSkin parameter, or the /ImageViewer.aspx link or desc parameter...
CVE-2018-10138
The CVE-2018-10138 entry affects the CATALooK.netStore module for DotNetNuke/DNN up to version 7.2.8. The vulnerability is a cross-site scripting (XSS) flaw exploitable via user-controlled input in the /ViewEditGoogleMaps.aspx (PortalID or CATSkin parameter) or /ImageViewer.aspx (link or desc par...
DotNetNuke DNNarticle Module 11 - Directory Traversal
DotNetNuke DNNarticle Module 11 - Directory Traversal 01. Advisory Information Title: Directory Traversal Vulnerability in DNNarticle module Date published: n/a Date of last update: n/a Vendors contacted: zldnn.com Discovered by: Esmaeil Rahimian Severity: Critical 02. Vulnerability Information...
CVE-2018-9126
CVE-2018-9126 affects the DNNArticle module 11 for DotNetNuke. The vulnerability allows remote attackers to read the web.config via the URI /GetCSS.ashx/?CP=%2fweb.config, exposing database credentials and other config data. Exploit references exist (Exploit-DB, PacketStorm), confirming in-the-wi...
DotNetNuke DreamSlider 01.01.02 - Arbitrary File Download (Metasploit)
Exploit Title: DotNetNuke DreamSlider Arbitrary File Download Date: 23/01/2014 Author: Glafkos Charalambous Version: 01.01.02 Vendor: DreamSlider Vendor URL: http://www.dreamslider.com/ Google Dork: inurl:/DesktopModules/DreamSlider/ CVE: Description DotNetNuke DreamSlider Module prior to version...
DotNetNuke DreamSlider 01.01.02 - Arbitrary File Download Exploit
Exploit for asp platform in category web applications Exploit Title: DotNetNuke DreamSlider Arbitrary File Download Date: 23/01/2014 Author: Glafkos Charalambous Version: 01.01.02 Vendor: DreamSlider Vendor URL: http://www.dreamslider.com/ Google Dork: inurl:/DesktopModules/DreamSlider/ CVE:...
DotNetNuke DreamSlider 01.01.02 Arbitrary File Download
Exploit Title: DotNetNuke DreamSlider Arbitrary File Download Date: 23/01/2014 Author: Glafkos Charalambous Version: 01.01.02 Vendor: DreamSlider Vendor URL: http://www.dreamslider.com/ Google Dork: inurl:/DesktopModules/DreamSlider/ CVE: Description DotNetNuke DreamSlider Module prior to version...
DotNetNuke DreamSlider 01.01.02 - Arbitrary File Download (Metasploit)
DotNetNuke DreamSlider 01.01.02 - Arbitrary File Download Metasploit Exploit Title: DotNetNuke DreamSlider Arbitrary File Download Date: 23/01/2014 Author: Glafkos Charalambous Version: 01.01.02 Vendor: DreamSlider Vendor URL: http://www.dreamslider.com/ Google Dork:...
DNN Cookie Deserialization Remote Code Execution (CVE-2017-9822)
An object deserialization vulnerability exists in DotNetNuke web content management system. A remote unauthenticated attacker may exploit this vulnerability by sending a crafted file to the web application...
DotNetNuke Remote Code Execution Vulnerability
DotNetNuke DNN is a set of U.S. DNN company supported by Microsoft , based on the ASP.NET platform for open source content management system CMS. The system is easy to install , scalable , feature-rich and so on. A security vulnerability exists in versions of DotNetNuke prior to 9.1.1. A remote...