CVE-2018-9126

The DNNArticle module 11 for DNN formerly DotNetNuke allows remote attackers to read the web.config file, and consequently discover database credentials, via the /GetCSS.ashx/?CP=%2fweb.config URI...

CVE-2018-9126

The DNNArticle module 11 for DNN formerly DotNetNuke allows remote attackers to read the web.config file, and consequently discover database credentials, via the /GetCSS.ashx/?CP=%2fweb.config URI...

CVE-2018-9126

The DNNArticle module 11 for DNN formerly DotNetNuke allows remote attackers to read the web.config file, and consequently discover database credentials, via the /GetCSS.ashx/?CP=%2fweb.config URI...

CVE-2018-9126

CVE-2018-9126 affects the DNNArticle module 11 for DotNetNuke. The vulnerability allows remote attackers to read the web.config via the URI /GetCSS.ashx/?CP=%2fweb.config, exposing database credentials and other config data. Exploit references exist (Exploit-DB, PacketStorm), confirming in-the-wi...

PT-2018-18872

Name of the Vulnerable Software and Affected Versions DNNArticle module 11 for DNN Description The issue allows remote attackers to read the web.config file, which can lead to the discovery of database credentials. This is achieved via the "/GetCSS.ashx/?CP=%2fweb.config" API endpoint...

CVE-2018-9126: Exposure of Sensitive Information to an Unauthorized Actor

The DNNArticle module 11 for DNN formerly DotNetNuke allows remote attackers to read the web.config file, and consequently discover database credentials, via the /GetCSS.ashx/?CP=%2fweb.config URI...

DotNetNuke DNNarticle Directory Traversal Vulnerability

Exploit for asp platform in category web applications 01. Advisory Information Title: Directory Traversal Vulnerability in DNNarticle module Date published: n/a Date of last update: n/a Vendors contacted: zldnn.com Discovered by: Esmaeil Rahimian 02. Vulnerability Information OVE-ID: CVE-2018-912...

DotNetNuke DNNarticle Directory Traversal

Advisory Information Title: Directory Traversal Vulnerability in DNNarticle module Date published: n/a Date of last update: n/a Vendors contacted: zldnn.com Discovered by: Esmaeil Rahimian Severity: Critical 02. Vulnerability Information OVE-ID: CVE-2018-9126. 03. Introduction DNN Article is...

byu.edu Improper Access Control vulnerability

Open Bug Bounty ID: OBB-593635 Description| Value ---|--- Affected Website:| byu.edu Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| IAC Improper Access Control / CWE-284 CVSSv3 Score:| 6.5...

DotNetNuke DreamSlider 01.01.02 Arbitrary File Download

Exploit Title: DotNetNuke DreamSlider Arbitrary File Download Date: 23/01/2014 Author: Glafkos Charalambous Version: 01.01.02 Vendor: DreamSlider Vendor URL: http://www.dreamslider.com/ Google Dork: inurl:/DesktopModules/DreamSlider/ CVE: Description DotNetNuke DreamSlider Module prior to version...

General Security Guidelines for Veeam Self-Service Backup Portal

Security Considerations The security advice in this article is provided as a courtesy and is not intended to replace the advice of a professional security consultant. The advice in this article has been tested with the assumption that the machine operating Veeam Backup Enterprise Manager and/or...

StoreFront upgrade fails ""The process cannot access the file 'C:\inetpub\wwwroot\Citrix\<store name>\web.config' because it is being used by another process."

In the MSI logs under C:\windows\temp\storefront we see the following exception: "The process cannot access the file 'C:\inetpub\wwwroot\Citrix\web.config' because it is being used by another process."...

Description of Update Rollup 2 for System Center 2012 R2 Service Provider Foundation

Description of Update Rollup 2 for System Center 2012 R2 Service Provider Foundation Summary This article describes the issues that are fixed in Update Rollup 2 for Microsoft System Center 2012 R2 Service Provider Foundation SPF. Additionally, this article contains the installation instructions f...

Password settings in Web.Config file for PNAgent changes automatically when "Configure XenApp Services Support" Console is opened in Storefront Snapin.

You have modified web.config file manually or using EnablePnaForStore.ps1 for PNAgent site for the Password Options. When you open "Configure XenApp Services Support" Console and click OK on it, the settings change back...

Arbitrary File Download Vulnerability in Beijing Zhiqingweiye Submission System

Beijing Zhiqingweiye Submission System is a CMS system for all kinds of topics or magazines, which can be submitted remotely. The product has an arbitrary file download vulnerability, the vulnerability URL is: /Admin/Upload/Index?path=%2Fweb.config&fileName=%E9%99%84%E5%9B%BE&Browser=IE, an...

EMC RSA Archer eGRC Information Disclosure Vulnerability

EMC RSA Archer eGRC is an enterprise IT governance and compliance governance product from EMC Corporation EMC. The product can be used to manage enterprise risk, automate business processes, and more. A security vulnerability exists in the EMC RSA Archer eGRC 5.5.x release. A remote attacker can...

How to Force Enterprise Manager Login to Use Form-Based Authentication

Article Applicability This article applies to Veeam Backup & Replication 12.x and older, as in those versions, the default was for Veeam Backup Enterprise Manager to utilize a Windows Authentication pop-up key="useWindowsAuth" value="true". Starting in Veeam Backup Enterprise Manager v13, the...

Xuzhou Huawei Information Technology Co., Ltd. electronic document management system contains file inclusion vulnerabilities

Xuzhou City, China Network Information Technology Co., Ltd. electronic document management system is to achieve the school's electronic documents such as electronic lesson plans, classroom materials, rules and regulations, management documents, audio-visual materials, photographs, etc.,...

Desktop Viewer is Showing Up Even though it has been Disabled Through the web.config File

Desktop Viewer is showing up even though it has been disabled through the web.config file...

File Containment Vulnerability in Hangzhou Ancai Network Reimbursement System

Hangzhou Ancai Network Reimbursement System is an online reimbursement system that supports online bill of lading and online approval for employees, bidding farewell to paper transmission and improving the timeliness, safety and standardization of information transmission. A file inclusion...