Vulnerabilities

TI-2018-06628 CVE-2018-9126 · GHSA-7jcf-pp7q-q98w

The DNNArticle module 11 for DNN (formerly DotNetNuke) allows remote attackers to read…

HIGH 73

The DNNArticle module 11 for DNN (formerly DotNetNuke) allows remote attackers to read the web.config file, and consequently discover database credentials, via the /GetCSS.ashx/?CP=%2fweb.config URI.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.48907 Published 2018-04-04 No fix listed CWE-200

TI-2013-04441 CVE-2013-5117 · GHSA-2mgr-wwxh-g3g7

SQL injection vulnerability in the RSS page (DNNArticleRSS.aspx) in the ZLDNN DNNArticle…

LOW 37

SQL injection vulnerability in the RSS page (DNNArticleRSS.aspx) in the ZLDNN DNNArticle module before 10.1 for DotNetNuke allows remote attackers to execute arbitrary SQL commands via the categoryid parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.02383 Published 2014-03-12 No fix listed CWE-89

Vulnerabilities

Filters

The DNNArticle module 11 for DNN (formerly DotNetNuke) allows remote attackers to read…

SQL injection vulnerability in the RSS page (DNNArticleRSS.aspx) in the ZLDNN DNNArticle…