VendorsDNN Softwaredotnetnuke5.06.00
Vulnerabilities

DNN Software DotNetNuke 5.06.00

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

4CVEs
CVE-2013-4649
Cross-site scripting (XSS) vulnerability in DotNetNuke (DNN) before 6.2.9 and 7.x before 7.1.1 allows remote attackers to inject arbitrary web script or HTML via the __dnnVariable parameter to the default URI.
Published 2014-03-12 · Modified
4.3EPSS 0.025
CVE-2010-4514
Cross-site scripting (XSS) vulnerability in Install/InstallWizard.aspx in DotNetNuke 5.05.01 and 5.06.00 allows remote attackers to inject arbitrary web script or HTML via the __VIEWSTATE parameter. NOTE: some of these details are obtained from third party information.
Published 2010-12-09 · Modified
4.31 PoCEPSS 0.015
CVE-2013-7335
Open redirect vulnerability in DotNetNuke (DNN) before 6.2.9 and 7.x before 7.1.1 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors.
Published 2014-03-12 · Modified
4.3EPSS 0.012
CVE-2013-3943
Cross-site scripting (XSS) vulnerability in DotNetNuke (DNN) before 6.2.9 and 7.x before 7.1.1 allows remote authenticated users to inject arbitrary web script or HTML via vectors related to the Display Name field in the Manage Profile.
Published 2014-03-12 · Modified
3.5EPSS 0.009