Where
AND
-Infinity
0

Trending

Last week
Last month
Last year

DotNetNuke DotNetNukeInput Validation

Risk 52
Severity
7.5
Input Validation
AV:N/AC:L/Au:N/C:P/I:P/A:P

DotNetNuke 2.0 through 4.8.4 allows remote attackers to load .ascx files instead of skin files, and possibly access privileged functionality, via unknown vectors related to parameter validation.

First published (updated )
CVE-2008-7102

DotNetNuke DotNetNukeUnspecified vulnerability in DotNetNuke 4.4.1 through 4.8.4 allows remote authenticated users to byp…

Risk 46
Severity
6.5
AV:N/AC:L/Au:S/C:P/I:P/A:P

Unspecified vulnerability in DotNetNuke 4.4.1 through 4.8.4 allows remote authenticated users to bypass authentication and gain privileges via unknown vectors related to a "unique id" for user actions and improper validation of a "user identity."

First published (updated )
CVE-2008-7100

DotNetNuke DotNetNukeInfoleak

Risk 26
Severity
5
Infoleak
AV:N/AC:L/Au:N/C:P/I:N/A:N

The install wizard in DotNetNuke 4.0 through 5.1.4 does not prevent anonymous users from accessing functionality related to determination of the need for an upgrade, which allows remote attackers to access version information and possibly other sensitive information.

First published (updated )
CVE-2009-4109

DotNetNuke DotNetNukeUnspecified vulnerability in DotNetNuke 4.0 through 4.8.4 and 5.0 allows remote attackers to obtain …

Risk 26
Severity
5
AV:N/AC:L/Au:N/C:P/I:N/A:N

Unspecified vulnerability in DotNetNuke 4.0 through 4.8.4 and 5.0 allows remote attackers to obtain sensitive information (portal number) by accessing the install wizard page via unknown vectors.

First published (updated )
CVE-2008-7101

nuget/DotNetNuke.CoreXSS

Risk 22
Severity
4.3
XSS
AV:N/AC:M/Au:N/C:N/I:P/A:N

Cross-site scripting (XSS) vulnerability in DotNetNuke (DNN) before 6.2.9 and 7.x before 7.1.1 allows remote attackers to inject arbitrary web script or HTML via the dnnVariable parameter to the default URI.

First published (updated )
CVE-2013-4649

nuget/DotNetNuke.CoreInput Validation

Risk 22
Severity
4.3
Input Validation
AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:L/A:N

Open redirect vulnerability in DotNetNuke (DNN) before 6.2.9 and 7.x before 7.1.1 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors.

First published (updated )
CVE-2013-7335

DotNetNuke DotNetNukeXSS

Risk 18
Severity
3.5
XSS
AV:N/AC:M/Au:S/C:N/I:P/A:N

Cross-site scripting (XSS) vulnerability in DotNetNuke (DNN) before 6.2.9 and 7.x before 7.1.1 allows remote authenticated users to inject arbitrary web script or HTML via vectors related to the Display Name field in the Manage Profile.

First published (updated )
CVE-2013-3943

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203