CVE-2018-9126

PoC ×2—

CVSS 3.0

9.8 critical

EPSS

49%p99

Published

Apr 4, 2018 (Apr 4, 2018)

Modified

Jun 17, 2026

Description

The DNNArticle module 11 for DNN (formerly DotNetNuke) allows remote attackers to read the web.config file, and consequently discover database credentials, via the /GetCSS.ashx/?CP=%2fweb.config URI.

Vendors: zldnn
Products: dnnarticle
Weakness: CWE-200
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (48.9%)

In the news0 stories

No ingested article mentions this CVE yet.