• Introduction
• Vulnerability

Introduction

Dixit Wikipedia, "DotNetNuke is an open source web content management system based on Microsoft .NET. DotNetNuke was written in VB.NET, though the developer has shifted to C# since version 6.0. It is distributed under both a Community Edition MIT license and commercial proprietary licenses as the Professional and Enterprise Editions."

Vulnerability

This is a classic XML External Entity Attack, leading to file disclosure or hashes stealing.