Products

Evoq Content Overview Content Creation Workflow Asset Management Mobile Responsive Personalization Content Analytics SEO Integrations Security Website PerformanceEvoq Engage Overview Community Management  Dashboard  Analytics  Member Profile Gamification Advocate Marketing Community Engagement  Ideas  Answers  Discussions  Groups  Wikis  Events Mobile ReadyDNN Support PackagesEvoq: CMS FeaturesEvoq OnDemandCompare DNN's CMS Products

Solutions

Content Management SystemMulti-Channel PublishingDigital MarketingOnline Community ManagementIntranet Software SolutionOur CustomersPrime

Resources

Test DrivesSchedule A DemoDocumentation CenterWebinarsWhite PapersProduct ManualsRequest PricingData SheetsCase StudiesEvoq Preferred Products Content Management Ecommerce Forms Identity Management and Authentication Site Management Social Themes

Partners

DNN Partners Partner Directory Become a DNN Partner Partner Program Overview  Hosting  Implementation  ISV  Training  Competencies

Community

Participate Ask a Question Forums Community Showcase DNN MVP  Program Overview  Lifetime MVPs  Honorary MVPs Subscribe to DNN Digest Advisory Groups  Awareness Advisory Group  Developer Advisory Group  Partner Advisory Group  Technology Advisory GroupLearn Documentation Wiki Community Blog Video Library Project History Development RoadmapDownload DNN Store Language Packs Manuals Nightly BuildsSecurity Policies Security Center

Blog

About

News Press Releases News Coverage Press KitCareersContact DNN

QA

Ideas Test

New Community Website

Ordinarily, you'd be at the right spot, but we've recently launched a brand new community website... For the community, by the community.

Yay... Take Me to the Community!

Welcome to the DNN Community Forums, your preferred source of online community support for all things related to DNN.
In order to participate you must be a registered DNNizen
HomeHomeUsing DNN Platf...Using DNN Platf...Administration ...Administration ...DNN 6.2.9 under attackDNN 6.2.9 under attack
Previous
 
Next
New Post
11/30/2015 4:13 AM
 
Edoardo Antonini


Joined: 12/11/2006
Posts: 137

Ok, this thing is not going to stop.

Each and every week during the week end the idiot screws up my portal and I'm forced to restore my db.

I can't seem to get any help from the guys that coded my third party modules since they all say their module is safe, I can't pinpoint where the attack is exactly taking place because the logs are simply too complicated to figure out for a newbie not knowing what to look for.

I can see the attackers using a SQL query of some kind but I can't see where, or which module they are targeting.

I'll try upgrading the whole platform and seeing how many third party modules will stop working after that and eventually decide if I want to scrap the whole thing and migrate to another platform.

 Can't think of anything else at this point.
 
New Post
11/30/2015 6:13 AM
 
Sebastian Leupold


Sebastian Leupold's Avatar

Sebastian Leupold's Avatar

Sebastian Leupold's Avatar

Sebastian Leupold's Avatar

www.dnnwerk.de
Joined: 3/8/2004
Posts: 46212
what exactly is happening to your database, which data is changed?
Cheers from Germany,
Sebastian Leupold

dnnWerk - The DotNetNuke Experts   German Spoken DotNetNuke User Group

Speed up your DNN Websites with TurboDNN
 
New Post
12/16/2015 4:43 AM
 
Edoardo Antonini


Joined: 12/11/2006
Posts: 137
Last update.
I have not been able to find anything at all on my IIS logs. URLSCAN seems useless, SQL attack strings do come up on the DNN Log Viewer but with no indication whatsoever as to which page or website is under attack and are therefore not very useful.
If I look in the IIS logs for something happening at the time that appears on the DNN Log viewer I can't find one single thing happening on any of the websites and that's strange. Where does the Log Viewer take the datetime value from? Is it in synch with IIS or could they be on two totally different timeframes?

I was told by all third party module programmers I'm using that these have no known vulnerabilities and that brings me back to square one and the problem is still there.
Tried upgrading DNN but failed for the time being.
Will try again.
 
New Post
12/16/2015 5:46 AM
 
Edoardo Antonini


Joined: 12/11/2006
Posts: 137

Why on earth did it post my reply 6 times after not reacting to the button click :/

 
 
New Post
12/16/2015 5:54 AM
 
Ilpo Juvander


www.juvander.fi/ilpo
Joined: 10/29/2007
Posts: 187
http://www.juvander.fi/ilpo
 
 Page 5 of 9
Previous123456...9Next 
Previous
 
Next
HomeHomeUsing DNN Platf...Using DNN Platf...Administration ...Administration ...DNN 6.2.9 under attackDNN 6.2.9 under attack


These Forums are dedicated to discussion of DNN Platform and Evoq Solutions.

For the benefit of the community and to protect the integrity of the ecosystem, please observe the following posting guidelines:

  1. No Advertising. This includes promotion of commercial and non-commercial products or services which are not directly related to DNN.
  2. No vendor trolling / poaching. If someone posts about a vendor issue, allow the vendor or other customers to respond. Any post that looks like trolling / poaching will be removed.
  3. Discussion or promotion of DNN Platform product releases under a different brand name are strictly prohibited.
  4. No Flaming or Trolling.
  5. No Profanity, Racism, or Prejudice.
  6. Site Moderators have the final word on approving / removing a thread or post or comment.
  7. English language posting only, please.
What is Liquid Content?
Find Out
What is Liquid Content?
Find Out
What is Liquid Content?
Find Out