DotNetNuke

Records3All Threatist records

Exploited (KEV)1In CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

DotNetNuke records in CISA KEV

TI-2017-07201 DotNetNuke (DNN) Remote Code Execution Vulnerability CRITICAL 97KEV 2021-11-03

Components

Products in the NVD configurations · select one to filter the records

Dotnetnuke 1 record LOW Dotnetnuke Iframe 1 record LOW

Records

3 records

TI-2017-07201 CVE-2017-9822 · GHSA-x2rg-fmcv-crq5

Code injection in DotNetNuke CMS Fixed in 9.1.1

CRITICAL 97KEV

DNN (aka DotNetNuke) before 9.1.1 has Remote Code Execution via a cookie, aka "2017-08 (Critical) Possible remote code execution on DNN sites."

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.94789 Published 2017-07-20 Fixed in 9.1.1 CWE-94

TI-2007-00644 CVE-2007-0660 · GHSA-xr96-7ccp-pg5c

Cross-site scripting (XSS) vulnerability in the IFrame module before 03.02.01 for…

LOW 33

Cross-site scripting (XSS) vulnerability in the IFrame module before 03.02.01 for DotNetNuke (DNN) allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to "Pass through values."

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.01251 Published 2007-02-01 Fixed in 03.02.01 CWE-79

TI-2012-00950 CVE-2012-1036 · GHSA-c5cm-p9gh-w474

Cross-site scripting (XSS) vulnerability in the telerik HTML editor in DotNetNuke before…

LOW 22

Cross-site scripting (XSS) vulnerability in the telerik HTML editor in DotNetNuke before 5.6.4 and 6.x before 6.1.0 allows remote attackers to inject arbitrary web script or HTML via a message.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.00921 Published 2012-04-11 No fix listed CWE-79

Open these records in search →

Critical	0
High	1
Medium	2
Low	0
No CVSS	0