DNN (DotNetNuke) DNNArticle Module categoryid Parameter SQL Injection

The version of DNN installed on the remote host is affected by a SQL injection vulnerability due to a failure to properly sanitize user-supplied input to the 'categoryid' parameter of the 'dnnarticlerss.aspx' script. A remote, unauthenticated attacker can leverage this issue to launch a SQL...

DotNetNuke DNNArticle Module 10.0 - SQL Injection

DotNetNuke DNNArticle Module 10.0 - SQL Injection Title: DotNetNuke DNNArticle Module SQL Injection Vulnerability References: CVE-2013-5117 Discovered by: Sajjad Pourali Vendor http://www.zldnn.com/ , http://www.dnnarticle.com/‎ Vendor advisory:...

DotNetNuke DNNArticle Module 10.0 - SQL Injection Vulnerability

Remote: yes Authentication required: no User interaction required: no Impact: High PoC: http://server/desktopmodules/dnnarticle/dnnarticlerss.aspx?moduleid=0&email protected@version 0day.today 2018-01-01...

DotNetNuke DNNArticle Module 10.0 - SQL Injection

Title: DotNetNuke DNNArticle Module SQL Injection Vulnerability References: CVE-2013-5117 Discovered by: Sajjad Pourali Vendor http://www.zldnn.com/ , http://www.dnnarticle.com/‎ Vendor advisory: http://www.zldnn.com/Support/tabid/643/ctl/RecordList/mid/1691/ItemID/2979/Default.aspx Ticket iD:297...

DotNetNuke DNNArticle 10.0 SQL Injection

Title: DotNetNuke DNNArticle Module SQL Injection Vulnerability References: CVE-2013-5117 Discovered by: Sajjad Pourali Vendor http://www.zldnn.com/ , http://www.dnnarticle.com/‎ Vendor advisory: http://www.zldnn.com/Support/tabid/643/ctl/RecordList/mid/1691/ItemID/2979/Default.aspx Ticket iD:297...