Page 3 of 22 results (0.003 seconds)

CVSS: 6.1EPSS: 0%CPEs: 65EXPL: 0

CVE-2013-7335

https://notcve.org/view.php?id=CVE-2013-7335

12 Mar 2014 — Open redirect vulnerability in DotNetNuke (DNN) before 6.2.9 and 7.x before 7.1.1 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors. Vulnerabilidad de redirección abierta en DotNetNuke (DNN) anterior a 6.2.9 y 7.x anterior a 7.1.1 permite a atacantes remotos redirigir usuarios hacia sitios web arbitrarios y realizar ataques de phishing a través de vectores no especificados. • http://secunia.com/advisories/53493 • CWE-20: Improper Input Validation •

CVSS: 6.1EPSS: 0%CPEs: 65EXPL: 2

CVE-2013-4649 – DotNetNuke (DNN) 7.1.0 / 6.2.8 Cross Site Scripting

https://notcve.org/view.php?id=CVE-2013-4649

13 Aug 2013 — Cross-site scripting (XSS) vulnerability in DotNetNuke (DNN) before 6.2.9 and 7.x before 7.1.1 allows remote attackers to inject arbitrary web script or HTML via the __dnnVariable parameter to the default URI. Vulnerabilidad de XSS en DotNetNuke (DNN) anterior a 6.2.9 y 7.x anterior a 7.1.1 permite a atacantes remotos inyectar script Web o HTML arbitrarios a través del parámetro __dnnVariable hacia la URI por defecto. DotNetNuke (DNN) versions prior to 7.1.0 and 6.2.8 suffer from a cross site scripting vuln... • https://packetstorm.news/files/id/122792 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •