de-DEen-US
Blog_List
The blog about Microsoft products by Matthias Schlomann
 Matthias Schlomann
 18  3643  12/9/2015
Categories
Blog

DNNBlog 06.00.00 upgrade security issue

By Matthias Schlomann on 9/12/2013

After upgrade the DnnBlog Module to Version 06.00.00 it could be possible that unauthenticated users have access to the 'Mange' and 'Edit Blog' Buttons, and can edit your Blog Posts.  This security issue caused on an error upgrading the Database to Version 06.00.00.  We have localized the issue and it would be fixed with the next release.

 

As it is a security issue we also have a Workaround for you:

 

  1. Login with host permissions
  2. Go to Host tab and select 'Execute SQL'
  3. Add the following script to the SQL tab and run it as script:
1.update {databaseOwner}{objectQualifier}Blog_Blogs set CreatedByUserID = OwnerUserId where CreatedByUserID is null

 

After you runing this script the security issue is gone and your blog is save.

    Blog
    bugfix
    DNN
    dnn blog
    DNN Platform
    DNNBlog
    DotNetNuke
    Fix
    Security

    1 comment(s) so far...

    Forget to say thank to Stefan Kamphuis who shows me how I have to use debug to search about issues. Thanks a lot! Stefan solved me much hours to search about the issue.

    Blog_Archive
    Blog_Tags
    Privacy Statement | Terms Of Use | © 1994-2024 by AARSYS - Matthias Schlomann