DNN_CVE-2015-2794

DNNCVE-2015-2794 Plugin NSE para Nmap que escanea una aplicación web DotNetNuke DNN en busca de una vulnerabilidad de Bypass de Autenticación de Administración CVE-2015-2794, EDB-ID: 39777...

CVE-2021-31858: Improper Neutralization of Input During Web Page Generation

DotNetNuke DNN 9.9.1 CMS is vulnerable to a Stored Cross-Site Scripting vulnerability in the user profile biography section which allows remote authenticated users to inject arbitrary code via a crafted payload...

CVE-2019-12562

Stored Cross-Site Scripting in DotNetNuke DNN Version before 9.4.0 allows remote attackers to store and embed the malicious script into the admin notification page. The exploit could be used to perfom any action with admin privileges such as managing content, adding users, uploading backdoors to...

CVE-2019-12562: Improper Neutralization of Input During Web Page Generation

Stored Cross-Site Scripting in DotNetNuke DNN Version before 9.4.0 allows remote attackers to store and embed the malicious script into the admin notification page. The exploit could be used to perfom any action with admin privileges such as managing content, adding users, uploading backdoors to...

CVE-2013-3943: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in DotNetNuke DNN before 6.2.9 and 7.x before 7.1.1 allows remote authenticated users to inject arbitrary web script or HTML via vectors related to the Display Name field in the Manage Profile...

CVE-2013-7335: Improper Input Validation

Open redirect vulnerability in DotNetNuke DNN before 6.2.9 and 7.x before 7.1.1 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors...

PT-2014-3373

Name of the Vulnerable Software and Affected Versions DotNetNuke DNN versions prior to 6.2.9 DotNetNuke DNN versions 7.x prior to 7.1.1 Description The issue allows remote attackers to redirect users to arbitrary web sites, potentially leading to phishing attacks. The exact vectors used for the...

CVE-2007-0660: Undefined Security Weakness

Cross-site scripting XSS vulnerability in the IFrame module before 03.02.01 for DotNetNuke DNN allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to "Pass through values."...