Skip to content

Dnnsoftware Dotnetnuke vulnerabilities

dnnsoftware dotnetnukeModerate severity vulnerability that affects DotNetNuke.CoreCVE-2015-1566Fix available4.3 MediumFebruary 9, 2015
dnnsoftware dotnetnukeDotNetNuke (DNN) Open redirect vulnerabilityCVE-2013-7335Fix available4.3 MediumMarch 12, 2014
dnnsoftware dotnetnukeDotNetNuke (DNN) Cross-site scripting (XSS) vulnerability via the __dnnVariable parameterCVE-2013-4649Fix available4.3 MediumMarch 12, 2014
dnnsoftware dotnetnukeCross-site scripting (XSS) vulnerability in DotNetNuke (DNN) before 6.2.9 and 7.x before 7.1.1...CVE-2013-39433.5 LowMarch 12, 2014
dnnsoftware dotnetnukeCross-site scripting (XSS) vulnerability in the telerik HTML editor in DotNetNuke before 5.6.4...CVE-2012-10364.3 MediumApril 11, 2012
dnnsoftware dotnetnukeCross-site scripting (XSS) vulnerability in DotNetNuke 6.x through 6.0.2 allows user-assisted...CVE-2012-10304.3 MediumApril 11, 2012
dnnsoftware dotnetnukeCross-site scripting (XSS) vulnerability in Install/InstallWizard.aspx in DotNetNuke 5.05.01 and...CVE-2010-4514Public exploit4.3 MediumDecember 9, 2010
dnnsoftware dotnetnukeCross-site scripting (XSS) vulnerability in the search functionality in DotNetNuke 4.8 through 5...CVE-2009-41104.3 MediumNovember 28, 2009
dnnsoftware dotnetnukeThe install wizard in DotNetNuke 4.0 through 5.1.4 does not prevent anonymous users from...CVE-2009-41095.0 MediumNovember 28, 2009
dnnsoftware dotnetnukeDotNetNuke 2.0 through 4.8.4 allows remote attackers to load .ascx files instead of skin files,...CVE-2008-71027.5 HighAugust 27, 2009
dnnsoftware dotnetnukeUnspecified vulnerability in DotNetNuke 4.0 through 4.8.4 and 5.0 allows remote attackers to...CVE-2008-71015.0 MediumAugust 27, 2009
dnnsoftware dotnetnukeUnspecified vulnerability in DotNetNuke 4.4.1 through 4.8.4 allows remote authenticated users to...CVE-2008-71006.5 MediumAugust 27, 2009
dnnsoftware dotnetnukeCross-site scripting (XSS) vulnerability in Website\admin\Sales\paypalipn.aspx in DotNetNuke (DNN...CVE-2009-13664.3 MediumApril 22, 2009
dnnsoftware dotnetnukeCross-site scripting (XSS) vulnerability in the error handling page in DotNetNuke 4.6.2 through 4...CVE-2008-67334.3 MediumApril 21, 2009
dnnsoftware dotnetnukeCross-site scripting (XSS) vulnerability in the Language skin object in DotNetNuke before 4.8.4...CVE-2008-67324.3 MediumApril 21, 2009
dnnsoftware dotnetnukeCross-site scripting (XSS) vulnerability in Default.aspx in DotNetNuke 4.8.3 and earlier allows...CVE-2008-6644Public exploit4.3 MediumApril 7, 2009
dnnsoftware dotnetnukeUnspecified vulnerability in the Skin Manager in DotNetNuke before 4.8.2 allows remote...CVE-2008-65424.6 MediumMarch 30, 2009
dnnsoftware dotnetnukeUnrestricted file upload vulnerability in the file manager module in DotNetNuke before 4.8.2...CVE-2008-65416.8 MediumMarch 30, 2009
dnnsoftware dotnetnukeDotNetNuke Default Machine Key ExposureCVE-2008-6540Public exploitFix available5.1 MediumMarch 30, 2009
dnnsoftware dotnetnukeUnspecified vulnerability in DotNetNuke 4.5.2 through 4.9 allows remote attackers to "add...CVE-2008-63996.4 MediumMarch 5, 2009
dnnsoftware dotnetnukeCross-site scripting (XSS) vulnerability in Default.aspx in Perpetual Motion Interactive Systems...CVE-2006-4973Public exploit4.3 MediumSeptember 25, 2006
dnnsoftware dotnetnuke** UNVERIFIABLE ** Unspecified vulnerability in an unspecified DNN Modules module for DotNetNuke...CVE-2006-360110.0 HighJuly 14, 2006
dnnsoftware dotnetnukeMultiple cross-site scripting (XSS) vulnerabilities in DotNetNuke before 3.0.12 allow remote...CVE-2005-00404.3 MediumMay 19, 2005
dnnsoftware dotnetnukeCross-site scripting (XSS) vulnerability in EditModule.aspx for DotNetNuke (formerly IBuySpy...CVE-2004-23254.3 MediumDecember 31, 2004
dnnsoftware dotnetnukeSQL injection vulnerability in DotNetNuke (formerly IBuySpy Workshop) 1.0.6 through 1.0.10d...CVE-2004-23247.5 HighDecember 31, 2004
dnnsoftware dotnetnukeDotNetNuke (formerly IBuySpy Workshop) 1.0.6 through 1.0.10d allows remote attackers to obtain...CVE-2004-23235.0 MediumDecember 31, 2004