DotNetNuke (aka DNN) before 9.2.0 suffers from a server-side request forgery vulnerability in the DnnImageHandler class. Attackers may be able to access information about internal network resources.
Log in to view the POC file snapshot cached by Shenlong Bot
Log in to view