CVE-2004-2323

DotNetNuke (formerly IBuySpy Workshop) 1.0.6 through 1.0.10d allows remote attackers to obtain sensitive information, including the SQL server username and…

published August 16, 2005

CVSS
—
EPSS
1%
Percentile
71.9
In the wild
Unconfirmed
What it is

DotNetNuke (formerly IBuySpy Workshop) 1.0.6 through 1.0.10d allows remote attackers to obtain sensitive information, including the SQL server username and password, via a GET request for source or configuration files such as Web.config.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01388 · 71.9th percentile
Published
2005-08-16T04:00Z
EPSS history
Timeline
  • 16 AUG 04:00Z
    DotNetNuke (formerly IBuySpy Workshop) 1.0.6 through 1.0.10d allows remote attackers to obtain sensitive information, including the SQL server username and…
    cvelistv5