inurl:dnn.js

GHDB-ID:

5192

Author:

F1uffyGoat

Google Dork Description:

inurl:dnn.js

inurl:dnn.js Reveals Raw Javascript of the Dot Net Nuke CMS of websites that may be vulnerable to XSS ( CVE-2013-4649 ) via searching the page text for the string ' Type.registerNamespace("dnn") ' .

Vulnerable versions: 
- DNN 7.1.0 and earlier
- DNN 6.2.8 and earlier

POC: http://www.vulnerable.com/?__dnnVariable={'__dnn_pageload':'alert(/XSS/)'}