high7.5Public exploit code
CVE-2013-5117
SQL injection vulnerability in the RSS page (DNNArticleRSS.aspx) in the ZLDNN DNNArticle module before 10.1 for DotNetNuke allows remote attackers to execute a…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- DotNetNuke DNNArticle Module 10.0 - SQL Injection2013-08-15 · webapps · php · Verified
Impact
SQL injection vulnerability in the RSS page (DNNArticleRSS.aspx) in the ZLDNN DNNArticle module before 10.1 for DotNetNuke allows remote attackers to execute arbitrary SQL commands via the categoryid parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Zldnn | Dnnarticle | through 10.0 |
Weakness classification
References
- NVD record
- CVE.org record
- http://osvdb.org/96306
- http://seclists.org/fulldisclosure/2013/Sep/9
- http://www.exploit-db.com/exploits/27602
- http://www.securityfocus.com/bid/61788
- http://www.zldnn.com/ViewArticle/Solution-for-DNNArticle-RSS-Security-Issue.aspx
- http://osvdb.org/96306
- http://seclists.org/fulldisclosure/2013/Sep/9
- http://www.exploit-db.com/exploits/27602
- http://www.securityfocus.com/bid/61788
- http://www.zldnn.com/ViewArticle/Solution-for-DNNArticle-RSS-Security-Issue.aspx