inurl:dnn.js

• SHDB
• 1854 阅读

• 日期：2019-04-23
• 类别：
  • Advisories and Vulnerabilities
• 作者：F1uffyGoat
• 语法：inurl:dnn.js

• inurl:dnn.js Reveals Raw Javascript of the Dot Net Nuke CMS of websites that may be vulnerable to XSS ( CVE-2013-4649 ) via searching the page text for the string ' Type.registerNamespace("dnn") ' .

  Vulnerable versions: 
  - DNN 7.1.0 and earlier
  - DNN 6.2.8 and earlier

  POC: http://www.vulnerable.com/?__dnnVariable={'__dnn_pageload':'alert(/XSS/)'}