Security Advisory
CVE-2018-9126
9.8
CRITICAL
Vulnerability Description
The DNNArticle module 11 for DNN (formerly DotNetNuke) allows remote attackers to read the web.config file, and consequently discover database credentials, via the /GetCSS.ashx/?CP=%2fweb.config URI.
Published Date
April 4, 2018
Official Source
NIST NVD Advisory