PT-2025-15636 · Dnn · Dnn

Name of the Vulnerable Software and Affected Versions: DNN formerly DotNetNuke versions prior to 9.13.8 Description: The algorithm used to generate the captcha image in DNN formerly DotNetNuke shows the least complexity of the desired image, making it easily readable by OCR tools. This allows an...

DNN CMS Insufficient Checking

The vulnerability of the DNN CMS system is related to insufficient checking of unusual or exceptional states. Exploiting this vulnerability can allow a malicious actor to bypass existing security restrictions remotely...

DNN CMS XSS

The vulnerability of the DNN CMS system is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks remotely...

DNN CMS XSS

The vulnerability of the DNN CMS system is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks remotely...

DNN CMS Code Execution

The vulnerability of the DNN CMS system is related to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

DNN CMS Code Execution

The vulnerability of the DNN CMS system is related to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

DNN CMS Code Execution

The vulnerability of the DNN CMS system is related to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

DNN CMS Unauthorized Access

The vulnerability of the DNN CMS system is related to the improper implementation of the sequence of actions to be performed. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to the system’s functions...

DNN CMS XSS

The vulnerability of the DNN CMS system is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks remotely...

PT-2025-39191

Name of the Vulnerable Software and Affected Versions DNN formerly DotNetNuke versions prior to 10.1.0 Description DNN formerly DotNetNuke is an open-source web content management platform. The Prompt module allows execution of commands that can return raw HTML. Malicious input, even if sanitized...

MTN Group: CVE-2017-9822 DotNetNuke Cookie Deserialization Remote Code Execution (RCE) on lonidoor.mtn.ci

The DotNetNuke DNN versions between 5.0.0 and 9.3.0 were affected by a deserialization vulnerability that could lead to remote code execution. The vulnerability was caused by the way DNN handled the DNNPersonalization cookie, which was used to store anonymous users' personalization options. The...

VulnCheck KEV: CVE-2017-0929

DNN aka DotNetNuke before 9.2.0 suffers from a Server-Side Request Forgery SSRF vulnerability in the DnnImageHandler class. Attackers may be able to access information about internal network resources...

DotNetNuke User Enumeration

In a DotNetNuke CMS installation it may be possible to enumerate user information. These DotNetNuke usernames may then be used in brute-force attacks against the login page to guess password credentials and gain access to perform further attacks. Only the first 5 usernames have been analysed duri...

PT-2023-15146

Name of the Vulnerable Software and Affected Versions DNN Corp DotNetNuke versions 7.0.0 through 9.10.2 Description An arbitrary file upload vulnerability in the Digital Assets Manager module allows attackers to execute arbitrary code via a crafted SVG file. Recommendations For versions 7.0.0...

CVE-2022-47053

An arbitrary file upload vulnerability in the Digital Assets Manager module of DNN Corp DotNetNuke v7.0.0 to v9.10.2 allows attackers to execute arbitrary code via a crafted SVG file...

CVE-2022-47053: Improper Neutralization of Input During Web Page Generation

An arbitrary file upload vulnerability in the Digital Assets Manager module of DNN Corp DotNetNuke v7.0.0 to v9.10.2 allows attackers to execute arbitrary code via a crafted SVG file...

CVE-2022-47053

An arbitrary file upload vulnerability in the Digital Assets Manager module of DNN Corp DotNetNuke v7.0.0 to v9.10.2 allows attackers to execute arbitrary code via a crafted SVG file...

CVE-2022-47053

Summary: CVE-2022-47053 affects DNN (DotNetNuke) Digital Assets Manager, across DotNetNuke v7.0.0 through v9.10.2, enabling arbitrary code execution via a crafted SVG file through an arbitrary file upload vulnerability. The available connected documents consistently describe the vulnerability cla...

DNN Corp DotNetNuke Cross-site Scripting Vulnerabilities

DNN also known as DotNetNuke is a set of U.S. DNN by Microsoft support , based on the ASP.NET platform for open source content management system CMS. The system is easy to install , scalable , feature-rich and so on. A security vulnerability exists in DNN Corp DotNetNuke versions v7.0.0 through...

CVE-2022-47053

An arbitrary file upload vulnerability in the Digital Assets Manager module of DNN Corp DotNetNuke v7.0.0 to v9.10.2 allows attackers to execute arbitrary code via a crafted SVG file...