Dotnetnuke Archives - CVE Vulnerability https://cvevulnerability.com/cve_products/dotnetnuke/ Sun, 26 Feb 2023 09:11:51 +0000 en-US hourly 1 https://wordpress.org/?v=7.0 https://cvevulnerability.com/wp-content/uploads/2023/02/cropped-Screenshot-2023-02-27-at-3.52.32-PM-32x32.png Dotnetnuke Archives - CVE Vulnerability https://cvevulnerability.com/cve_products/dotnetnuke/ 32 32 CVE-2008-7100 https://cvevulnerability.com/cve_vulnerabilities/cve-2008-7100/ Sun, 26 Feb 2023 09:11:51 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2008-7100/ Unspecified vulnerability in DotNetNuke 4.4.1 through 4.8.4 allows remote authenticated users to bypass authentication and gain privileges via unknown vectors related to a “unique id” for user actions and improper validation of a “user identity.”

The post CVE-2008-7100 appeared first on CVE Vulnerability.

]]> Unspecified vulnerability in DotNetNuke 4.4.1 through 4.8.4 allows remote authenticated users to bypass authentication and gain privileges via unknown vectors related to a “unique id” for user actions and improper validation of a “user identity.”

The post CVE-2008-7100 appeared first on CVE Vulnerability.

]]> CVE-2008-7101 https://cvevulnerability.com/cve_vulnerabilities/cve-2008-7101/ Sun, 26 Feb 2023 09:11:51 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2008-7101/ Unspecified vulnerability in DotNetNuke 4.0 through 4.8.4 and 5.0 allows remote attackers to obtain sensitive information (portal number) by accessing the install wizard page via unknown vectors.

The post CVE-2008-7101 appeared first on CVE Vulnerability.

]]> Unspecified vulnerability in DotNetNuke 4.0 through 4.8.4 and 5.0 allows remote attackers to obtain sensitive information (portal number) by accessing the install wizard page via unknown vectors.

The post CVE-2008-7101 appeared first on CVE Vulnerability.

]]> CVE-2008-7102 https://cvevulnerability.com/cve_vulnerabilities/cve-2008-7102/ Sun, 26 Feb 2023 09:11:51 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2008-7102/ DotNetNuke 2.0 through 4.8.4 allows remote attackers to load .ascx files instead of skin files, and possibly access privileged functionality, via unknown vectors related to parameter validation.

The post CVE-2008-7102 appeared first on CVE Vulnerability.

]]> DotNetNuke 2.0 through 4.8.4 allows remote attackers to load .ascx files instead of skin files, and possibly access privileged functionality, via unknown vectors related to parameter validation.

The post CVE-2008-7102 appeared first on CVE Vulnerability.

]]> CVE-2008-6732 https://cvevulnerability.com/cve_vulnerabilities/cve-2008-6732/ Sun, 26 Feb 2023 09:11:41 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2008-6732/ Cross-site scripting (XSS) vulnerability in the Language skin object in DotNetNuke before 4.8.4 allows remote attackers to inject arbitrary web script or HTML via “newly generated paths.”

The post CVE-2008-6732 appeared first on CVE Vulnerability.

]]> Cross-site scripting (XSS) vulnerability in the Language skin object in DotNetNuke before 4.8.4 allows remote attackers to inject arbitrary web script or HTML via “newly generated paths.”

The post CVE-2008-6732 appeared first on CVE Vulnerability.

]]> CVE-2008-6733 https://cvevulnerability.com/cve_vulnerabilities/cve-2008-6733/ Sun, 26 Feb 2023 09:11:41 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2008-6733/ Cross-site scripting (XSS) vulnerability in the error handling page in DotNetNuke 4.6.2 through 4.8.3 allows remote attackers to inject arbitrary web script or HTML via the querystring parameter.

The post CVE-2008-6733 appeared first on CVE Vulnerability.

]]> Cross-site scripting (XSS) vulnerability in the error handling page in DotNetNuke 4.6.2 through 4.8.3 allows remote attackers to inject arbitrary web script or HTML via the querystring parameter.

The post CVE-2008-6733 appeared first on CVE Vulnerability.

]]> CVE-2008-6644 https://cvevulnerability.com/cve_vulnerabilities/cve-2008-6644/ Sun, 26 Feb 2023 09:11:38 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2008-6644/ Cross-site scripting (XSS) vulnerability in Default.aspx in DotNetNuke 4.8.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO.

The post CVE-2008-6644 appeared first on CVE Vulnerability.

]]> Cross-site scripting (XSS) vulnerability in Default.aspx in DotNetNuke 4.8.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO.

The post CVE-2008-6644 appeared first on CVE Vulnerability.

]]> CVE-2007-0660 https://cvevulnerability.com/cve_vulnerabilities/cve-2007-0660/ Sun, 26 Feb 2023 09:05:34 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2007-0660/ Cross-site scripting (XSS) vulnerability in the IFrame module before 03.02.01 for DotNetNuke (DNN) allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to “Pass through values.”

The post CVE-2007-0660 appeared first on CVE Vulnerability.

]]> Cross-site scripting (XSS) vulnerability in the IFrame module before 03.02.01 for DotNetNuke (DNN) allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to “Pass through values.”

The post CVE-2007-0660 appeared first on CVE Vulnerability.

]]>