SQL Injection in Zldnn Dnnarticle
CVE-2013-5117
SQL injection vulnerability in the RSS page (DNNArticleRSS.aspx) in the ZLDNN DNNArticle module before 10.1 for DotNetNuke allows remote attackers to execute arbitrary SQL commands via the categoryid parameter.
Vulnerability class: SQL Injection
EPSS: 0.024 (82.3th percentile) — read the EPSS interpretation.
Affected products
- Zldnn Dnnarticle
- N/a — versions n/a
Weakness classification (CWE)
References
- cve@mitre.org (Exploit, Patch, exploit, x_refsource_EXPLOIT-DB)
- cve@mitre.org (x_refsource_OSVDB, vdb-entry)
- cve@mitre.org (mailing-list, x_refsource_FULLDISC)
- cve@mitre.org (x_refsource_CONFIRM, Patch, Vendor Advisory)
- cve@mitre.org (Exploit, vdb-entry, x_refsource_BID)