Security Advisory

CVE-2018-9126

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2018-04-04 19:00:00

Last updated 2024-08-05 07:17:51

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

The DNNArticle module 11 for DNN (formerly DotNetNuke) allows remote attackers to read the web.config file, and consequently discover database credentials, via the /GetCSS.ashx/?CP=%2fweb.config URI.

← Browse all CVEs View on cve.org ↗