Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
There is an information disclosure issue in DNN (formerly DotNetNuke) 9.5 within the built-in Activity-Feed/Messaging/Userid/ Message Center module. A registered user is able to enumerate any file in the Admin File Manager (other than ones contained in a secure folder) by sending themselves a message with the file attached, e.g., by using an arbitrary small integer value in the fileIds parameter.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
DNN 信息泄露漏洞
Vulnerability Description
DNN（又名DotNetNuke）是美国DNN公司的一套由微软支持、基于ASP.NET平台的开源内容管理系统（CMS）。该系统具有易于安装、可扩展、功能丰富等特点。 DNN (formerly DotNetNuke) 9.5版本中的内嵌的Activity-Feed/Messaging/Userid/ Message Center模块存在安全漏洞。攻击者可通过发送带有附件的消息利用该漏洞枚举Admin File Manager中的任意文件。
CVSS Information
N/A
Vulnerability Type
N/A