Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
DotNetNuke (formerly IBuySpy Workshop) 1.0.6 through 1.0.10d allows remote attackers to obtain sensitive information, including the SQL server username and password, via a GET request for source or configuration files such as Web.config.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
DotNetNuke多个漏洞
Vulnerability Description
DotNetNuke (formerly IBuySpy Workshop)1.0.6至1.0.10d存在漏洞。远程攻击者可以借助用于资源或如Web.config的配置文件的GET请求获得包括SQL服务器用户名和密码的敏感信息。
CVSS Information
N/A
Vulnerability Type
N/A