.. / CVE-2017-0929

• SSRF
• Nuclei
• Web

Exploit for DotNetNuke (DNN) ImageHandler <9.2.0 - Server-Side Request Forgery (CVE-2017-0929)

Description:

DotNetNuke (aka DNN) before 9.2.0 suffers from a server-side request forgery vulnerability in the DnnImageHandler class. Attackers may be able to access information about internal network resources.

Nuclei Template

View the template here CVE-2017-0929.yaml

Validate with Nuclei

echo "$URL" | nuclei -t ~/nuclei-templates/http/cves/2017/CVE-2017-0929.yaml

References: