CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

3 matches found

Prion•added 2018/04/04 7:29 p.m.•30 views

Code injection

The DNNArticle module 11 for DNN formerly DotNetNuke allows remote attackers to read the web.config file, and consequently discover database credentials, via the /GetCSS.ashx/?CP=%2fweb.config URI...

5CVSS9.3AI score0.48907EPSS

SaveExploits5References2Affected Software1

CVE•added 2018/04/04 7:00 p.m.•146 views

CVE-2018-9126

CVE-2018-9126 affects the DNNArticle module 11 for DotNetNuke. The vulnerability allows remote attackers to read the web.config via the URI /GetCSS.ashx/?CP=%2fweb.config, exposing database credentials and other config data. Exploit references exist (Exploit-DB, PacketStorm), confirming in-the-wi...

9.8CVSS9.3AI score0.48907EPSS

SaveExploits5References2Affected Software1

Rapid7 Vulnerability Database (full)•added 2018/04/04 12:00 a.m.•4 views

CVE-2018-9126: Exposure of Sensitive Information to an Unauthorized Actor

The DNNArticle module 11 for DNN formerly DotNetNuke allows remote attackers to read the web.config file, and consequently discover database credentials, via the /GetCSS.ashx/?CP=%2fweb.config URI...

9.8CVSS8.2AI score0.48907EPSS

SaveExploits5References2

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by