critical9.8Public exploit code
CVE-2018-9126
The DNNArticle module 11 for DNN (formerly DotNetNuke) allows remote attackers to read the web.config file, and consequently discover database credentials, via…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- DotNetNuke DNNarticle Module 11 - Directory Traversal2018-04-06 · webapps · windows
Impact
The DNNArticle module 11 for DNN (formerly DotNetNuke) allows remote attackers to read the web.config file, and consequently discover database credentials, via the /GetCSS.ashx/?CP=%2fweb.config URI.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Zldnn | Dnnarticle | Version 11 |