Mountain View 1600, CA 94043
+1 650-253-0000
name@example.com
Web
Site
Search
Register
Login
DNN Home
Services
-
DotNetNuke Support
-
CRM Systems
DNN
-
DotNetNuke Modules
-
Module Downloads
-
Module Upgrade Policy
DNN Support
-
Module Update News
-
Knowledge Base
-
License Management
-
Invoice History
Module Downloads
Blog
Store
Contact Us
-
About Us
Search
Home
1
2
3
4
5
Home
Support
Advance Login M...
Registration Form Security Issue
Previous
Next
3/3/2012 3:00 PM
MarkSensei
Joined: 6/27/2009
Posts: 34
Registration Form Security Issue
(Canada)
Hi,
I would like to broadcast a warning that my site was subject to a script injection attack which has destroyed my sites user account datatable . The attacker appears to have appended a script tag onto the country names in the COUNTRY drop down field of the registration page
Mark
3/3/2012 6:41 PM
DNN Module Support
Joined: 8/28/2006
Posts: 2065
Re: Registration Form Security Issue
(Australia)
Was this using the popup / slide down or on page registration mode?
3/3/2012 7:05 PM
MarkSensei
Joined: 6/27/2009
Posts: 34
Re: Registration Form Security Issue
(Canada)
Hi,
After further inspection in our IIS logs we found that it was not the login/registration module. The attack originated through a different module and targeted <title> tags, through the site, appending the malicious script. Advance Login was the only content on our site that had content in a <title> tag so it is where we actually say the malicious script tag in plain text (luckily). This led us to believe that the attack was trying to exploit input fields.
but to answer your question I use the module static on a page
Mark
3/3/2012 8:53 PM
DNN Module Support
Joined: 8/28/2006
Posts: 2065
Re: Registration Form Security Issue
(Australia)
Thanks for the follow up, and thank goodness it was not some loose code of ours. That would terrible, as we put a lot of effort into following best practices for security sake.
Enjoy our module.
Page 1 of 1
Previous
Next
Home
Support
Advance Login M...
Registration Form Security Issue