Signature Detail
This site is deprecated. Please CLICK HERE for latest updates
Short Name |
HTTP:DIR:DOTNETNUKE-DNNA-DIR |
|---|---|
Severity |
Minor |
Recommended |
No |
Recommended Action |
Drop |
Category |
HTTP |
Keywords |
DotNetNuke DNNarticle Module Directory Traversal |
Release Date |
2019/04/03 |
Update Number |
3159 |
Supported Platforms |
idp-4.0+, isg-3.0+, j-series-9.5+, mx-11.4+, srx-12.1+, srx-branch-12.1+, vmx-17.4+, vsrx-12.1+, vsrx3bsd-18.2+ |
HTTP: DotNetNuke DNNarticle Module Directory Traversal
This signature detects attempts to exploit a known vulnerability against DotNetNuke DNNarticle Module. A successful attack can lead to directory traversal.
Extended Description
The DNNArticle module 11 for DNN (formerly DotNetNuke) allows remote attackers to read the web.config file, and consequently discover database credentials, via the /GetCSS.ashx/?CP=%2fweb.config URI.
Affected Products
- Zldnn dnnarticle 11
References
- CVE: CVE-2018-9126