PT-2017-6612

Name of the Vulnerable Software and Affected Versions DotNetNuke DNN versions prior to 7.4.1 Description The issue allows remote attackers to reinstall the application and gain SuperUser access. This is achieved via a direct request to "Install/InstallWizard.aspx", which is an API endpoint. The...

PT-2010-5517

Name of the Vulnerable Software and Affected Versions DotNetNuke versions 5.05.01 through 5.06.00 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via the VIEWSTATE parameter in the Install/InstallWizard.aspx page. Recommendations For...

CVE-2010-4514: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Install/InstallWizard.aspx in DotNetNuke 5.05.01 and 5.06.00 allows remote attackers to inject arbitrary web script or HTML via the VIEWSTATE parameter. NOTE: some of these details are obtained from third party information...