CVE:CVE-2004-2323
CNNVD:CNNVD-200412-368
DotNetNuke (formerly IBuySpy Workshop)1.0.6至1.0.10d存在漏洞。远程攻击者可以借助用于资源或如Web.config的配置文件的GET请求获得包括SQL服务器用户名和密码的敏感信息。
solution:Upgrade dotnetnuke dotnetnuke to a higher version than 1.0.6,1.0.7,1.0.8,1.0.9,1.0.10d,and avoid the version 1.0.6,1.0.7,1.0.8,1.0.9,1.0.10d