الباحثون
رجوع
Esmaeil Rahimian
باحث من
SecureHost
#28269
من 60,590
9.8
إجمالي CVSS
الثغرات
·
1
PT-2018-18872
2018-04-04
9.8
CVE-2018-9126
Dnn
Dnnarticle
The issue allows remote attackers to read the web.config file, which can lead to the discovery of database credentials. This is achieved via the "/GetCSS.ashx/?CP=%2fweb.config" API endpoint.