Summary
The host is running DotNetNuke and is prone to multiple vulnerabilities.
Impact
Successful exploitation will allow attacker to gain unauthorized access to the server.
Impact Level: Application
Solution
Upgrade to DotNetNuke version 6.2.5 or later.
For updates refer to http://www.dotnetnuke.com/
Insight
Multiple flaws are present in DotNetNuke. The application fails to revalidate file and folder permissions correctly for uploads. This allows remote file upload and unauthorized access to the server, files and database.
Affected
DotNetNuke version prior to 5.x.
Severity
Classification
-
CVSS Base Score: 7.5
AV:N/AC:L/Au:N/C:P/I:P/A:P
Related Vulnerabilities
- Apache Axis2 Document Type Declaration Processing Security Vulnerability
- Atutor AContent Multiple SQL Injection and XSS Vulnerabilities
- Avenger's News System Command Execution
- Atlassian JIRA FishEye and Crucible Plugins XML Parsing Unspecified Security Vulnerability
- 'research_display.php' SQL Injection Vulnerability