CVE-2013-5117

zldnn dnnarticle < 10.0 - SQL Injection via categoryid Parameter

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2013-5117. PoCs published by Sajjad Pourali.

AI-analyzed exploit summary This exploit demonstrates a SQL injection vulnerability in the DNNArticle module for DotNetNuke. The PoC uses a crafted URL to inject a SQL query that retrieves the database version, confirming the vulnerability.

Description

SQL injection vulnerability in the RSS page (DNNArticleRSS.aspx) in the ZLDNN DNNArticle module before 10.1 for DotNetNuke allows remote attackers to execute arbitrary SQL commands via the categoryid parameter.

Exploits (1)

exploitdb WORKING POC VERIFIED
by Sajjad Pourali · textwebappsphp
https://www.exploit-db.com/exploits/27602

This exploit demonstrates a SQL injection vulnerability in the DNNArticle module for DotNetNuke. The PoC uses a crafted URL to inject a SQL query that retrieves the database version, confirming the vulnerability.

Classification
Working Poc 90%
Attack Type
Sqli
Complexity
Trivial
Reliability
Reliable
Target: DNNArticle Module for DotNetNuke 10.0 and earlier
No auth needed
Prerequisites: Access to the target server's URL
devstral-2 · analyzed Feb 16, 2026 Full analysis →

References (5)

Core 5
Core References
Exploit, Patch exploit x_refsource_exploit-db
http://www.exploit-db.com/exploits/27602
Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb
http://osvdb.org/96306
Mailing List mailing-list x_refsource_fulldisc
http://seclists.org/fulldisclosure/2013/Sep/9
Exploit vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/61788

Scores

EPSS 0.0239
EPSS Percentile 81.8%

Details

CWE
CWE-89
Status published
Products (1)
zldnn/dnnarticle < 10.0
Published Mar 12, 2014
Tracked Since Feb 18, 2026