DNN (DotNetNuke) 6.0.0 <= 9.3.2 Multiple Vulnerabilities

The version of DNN Platform formerly DotNetNuke running on the remote host is 6.0.0 or later but prior or equal to 9.3.2. It is, therefore, affected by multiple vulnerabilities including the following: - An unauthorized file access vulnerability exists due to insufficient verification of dynamic...

DotNetNuke Unauthorized Access Vulnerability

Description DotNetNuke is prone to an unauthorized-access vulnerability. Attackers can exploit this issue to gain unauthorized access and perform unauthorized actions. This may aid in further attacks. DotNetNuke versions 7.0.0 through 9.3.2 are vulnerable. Technologies Affected DotNetNuke...

Stored Cross-Site Scripting vulnerability in admin component of DotNetNuke

Cross-site scripting XSS is possible in DNN formerly DotNetNuke before 9.4.0 by remote authenticated users via the Display Name field in the admin notification function...

GHSA-5WHQ-J5QG-WJVP Stored Cross-Site Scripting vulnerability in admin component of DotNetNuke

Cross-site scripting XSS is possible in DNN formerly DotNetNuke before 9.4.0 by remote authenticated users via the Display Name field in the admin notification function...

Exploit for Cross-site Scripting in Dnnsoftware Dotnetnuke

CVE-2019-12562 !CVE-2019-12562https://mayaseven.com/wp-cont...

DotNetNuke 9.4.0 - Cross-Site Scripting

DotNetNuke 9.4.0 - Cross-Site Scripting Exploit Title: Stored Cross-Site Scripting in DotNetNuke DNN Version before 9.4.0 Exploit Description : This exploit will add a superuser to target DNN website. Exploit Condition : Successful exploitation occurs when an admin user visits a notification page...

DotNetNuke < 9.4.0 - Cross-Site Scripting

Exploit Title: Stored Cross-Site Scripting in DotNetNuke DNN Version before 9.4.0 Exploit Description : This exploit will add a superuser to target DNN website. Exploit Condition : Successful exploitation occurs when an admin user visits a notification page. Exploit Author: MAYASEVEN CVE :...

DotNetNuke Cross Site Scripting

Exploit Title: Stored Cross-Site Scripting in DotNetNuke DNN Version before 9.4.0 Exploit Description : This exploit will add a superuser to target DNN website. Exploit Condition : Successful exploitation occurs when an admin user visits a notification page. Exploit Author: MAYASEVEN CVE :...

DotNetNuke < 9.4.0 - Cross-Site Scripting Vulnerability

Exploit for multiple platform in category web applications Exploit Title: Stored Cross-Site Scripting in DotNetNuke DNN Version before 9.4.0 Exploit Description : This exploit will add a superuser to target DNN website. Exploit Condition : Successful exploitation occurs when an admin user visits ...

DotNetNuke 9.3.2 - Cross-Site Scripting

/ Exploit Title: "Display Name" Stored Unauthenticated XSS in DNN v9.3.2 Date: 4th of July, 2019 Exploit Author: Semen Alexandrovich Lyhin Vendor Homepage: https://www.dnnsoftware.com/ Software Link: https://github.com/dnnsoftware/Dnn.Platform/releases Version: v9.3.2 CVE : CVE-2019-13293 A...

CVE-2019-12562

Stored Cross-Site Scripting in DotNetNuke DNN Version before 9.4.0 allows remote attackers to store and embed the malicious script into the admin notification page. The exploit could be used to perfom any action with admin privileges such as managing content, adding users, uploading backdoors to...

CVE-2019-12562

Stored Cross-Site Scripting in DotNetNuke DNN Version before 9.4.0 allows remote attackers to store and embed the malicious script into the admin notification page. The exploit could be used to perfom any action with admin privileges such as managing content, adding users, uploading backdoors to...

Cross site scripting

Stored Cross-Site Scripting in DotNetNuke DNN Version before 9.4.0 allows remote attackers to store and embed the malicious script into the admin notification page. The exploit could be used to perfom any action with admin privileges such as managing content, adding users, uploading backdoors to...

CVE-2019-12562

CVE-2019-12562 describes a stored cross-site scripting (XSS) vulnerability in DotNetNuke (DNN) prior to version 9.4.0. The issue affects the admin notification function and can allow an attacker to embed malicious scripts by exploiting the Display Name field on the notification page, with exploit...

CVE-2019-12562

Stored Cross-Site Scripting in DotNetNuke DNN Version before 9.4.0 allows remote attackers to store and embed the malicious script into the admin notification page. The exploit could be used to perfom any action with admin privileges such as managing content, adding users, uploading backdoors to...

GHSA-H595-8PW6-5Q6V Inadequate Encryption Strength in DotNetNuke

DNN aka DotNetNuke 9.2 through 9.2.1 uses a weak encryption algorithm to protect input parameters...

Inadequate Encryption Strength in DotNetNuke

DNN aka DotNetNuke 9.2 through 9.2.1 uses a weak encryption algorithm to protect input parameters...

GHSA-PF46-GQG9-J3V3 Insufficient Entropy in DotNetNuke

DNN aka DotNetNuke 9.2 through 9.2.1 incorrectly converts encryption key source values, resulting in lower than expected entropy...

Insufficient Entropy in DotNetNuke

DNN aka DotNetNuke 9.2 through 9.2.1 incorrectly converts encryption key source values, resulting in lower than expected entropy...

GHSA-XX3H-J3CX-8QFJ Insufficient Entropy in DotNetNuke

DNN aka DotNetNuke 9.2 through 9.2.2 incorrectly converts encryption key source values, resulting in lower than expected entropy. NOTE: this issue exists because of an incomplete fix for CVE-2018-15812...