Hello,

We are using DNN 4.07 and our site has been hacked.

We think there is a bug here:

DNN(DotNetNuke) Gallery All Version Remote File Upload without
Authentication

Bug Found by Alireza Afzali From ISCN Team

Date of finding bug : 2008/05/5

Over 10 military website and 20 state of United State of america Defaced by
this bug :P



Find DNN path then go to this file

/Providers/HtmlEditorProviders/Fck/fcklinkgallery.aspx

Select : File ( A File On Your Site )
after Loading then Put this Code instead URL

__doPostBack('ctlURL$cmdUpload','')

now you see Browse
select root folder and your file will upload to
site/dnn path/Portals/0

Note:you can only upload *. swf, *.jpg, *.jpeg, *.jpe, *.gif, *.bmp, *.png,
*.doc, *.xls, *.ppt, *.pdf, *.txt, *.xml, *.xsl, *.css, *.zip, *.3gp,
*.asf, *.asx, *.avi, *.flv, *.m4v, *.mov, *.mp4, *.mpe, *.mpeg, *.mpg,
*.ram, *.rm, *.rmvb, *.wm, *.wmv, *.vob
by defualt but admin may change this and you will have a Shellç

We are trying to find a fix for this problem but with no succes.

We cant change the core version of DNN because  a lot modifications have been done.

Any help please?

 Since you've modified the core, you will have to get a copy of the source for a version that has the fix, and apply the code changes yourself.