Dotnetnuke 7.0.x < 9.5.0 XSS

According to its self-reported version, the instance of Dotnetnuke running on the remote web server is 7.0.x prior to 9.5.0. It is, therefore, affected by a XSS vulnerability. - For websites with user registration enabled, it is possible for a user to craft a registration that would inject...

DotNetNuke CMS 9.4.4 Zip Directory Traversal

Exploit Title: Zip Slip vulnerability Date: 23 Feb 2020 Exploit Author: Sajjad Pourali Vendor Homepage: http://dnnsoftware.com/ Software Link: https://github.com/dnnsoftware/Dnn.Platform/releases/download/v9.4.4/DNNPlatform9.4.4Install.zip Version: = 9.4.4 CVE : CVE-2020-5187 More Info:...

DotNetNuke 9.5 - Persistent Cross-Site Scripting

DotNetNuke 9.5 - Persistent Cross-Site Scripting Exploit Title: DotNetNuke 9.5 - Persistent Cross-Site Scripting Date: 2020-02-23 Exploit Author: Sajjad Pourali Vendor Homepage: http://dnnsoftware.com/ Software Link:...

DNN (DotNetNuke) 6.0.0 <= 9.3.2 Multiple Vulnerabilities

The version of DNN Platform formerly DotNetNuke running on the remote host is 6.0.0 or later but prior or equal to 9.3.2. It is, therefore, affected by multiple vulnerabilities including the following: - An unauthorized file access vulnerability exists due to insufficient verification of dynamic...

DNN (DotNetNuke) 7.0.0 < 9.3.1 Multiple Vulnerabilities

The version of DNN Platform formerly DotNetNuke running on the remote host is 7.0.0 or later but prior to 9.3.1. It is, therefore, affected by multiple vulnerabilities including the following: - A cross-site scripting XSS vulnerability exists due to improper validation of user-supplied input befo...

DNN (DotNetNuke) 3.0.0 < 9.1.0 SWF File Handling XSS

The version of DNN Platform formerly DotNetNuke running on the remote host is 3.0.0 or later but prior to 9.1.0. It is, therefore, affected by a cross-site scripting XSS vulnerability due to improper validation of user-supplied input when handling SWF files. An unauthenticated, remote attacker ca...

DNN (DotNetNuke) 6.2.x < 9.0.2 User Profile Information Disclosure

The version of DNN Platform formerly DotNetNuke running on the remote host is 6.2 or later but prior to 9.0.2. It is, therefore, affected by an unspecified flaw that allows an unauthenticated, remote attacker to disclose sensitive user profile property information. Note that Nessus has not tested...

DNN (DotNetNuke) < 8.0.4 Multiple Vulnerabilities

The version of DNN Platform formerly DotNetNuke running on the remote host is affected by multiple vulnerabilities : - A flaw exists due to improper validation of user permissions. An authenticated, remote attacker with permissions to edit a particular page can exploit this to make changes to sit...

DNN (DotNetNuke) < 8.0.1 Multiple Vulnerabilities

The version of DNN Platform formerly DotNetNuke running on the remote host is affected by multiple vulnerabilities : - A cross-site scripting XSS vulnerability exists due to improper validation of input to the 'returnurl' query string parameter before returning it to users. A remote attacker can...