Researchers
Back
Esmaeil Rahimian
Researcher from
SecureHost
#28269
of 60,590
9.8
Total CVSS
Vulnerabilities
·
1
PT-2018-18872
2018-04-04
9.8
CVE-2018-9126
Dnn
Dnnarticle
The issue allows remote attackers to read the web.config file, which can lead to the discovery of database credentials. This is achieved via the "/GetCSS.ashx/?CP=%2fweb.config" API endpoint.