Skip to content
OpenAdvisories

Package · NuGet

DotNetNuke.Core

36 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 6.1
    CVE-2019-12562 Public exploit

    Stored Cross-Site Scripting vulnerability in admin component of DotNetNuke

    Stored Cross-Site Scripting in DotNetNuke (DNN) Version before 9.4.0 allows remote attackers to store and embed the malicious script into the admin notification page. The exploit could be used to perfom any action with admin privileges such as managing conten…

    DotNetNuke.Core NuGet
  • Medium —
    CVE-2008-6540 Public exploit

    DotNetNuke Default Machine Key Exposure

    DotNetNuke before 4.8.2, during installation or upgrade, does not warn the administrator when the default (1) ValidationKey and (2) DecryptionKey values cannot be modified in the web.config file, which allows remote attackers to bypass intended access restric…

    DotNetNuke.Core NuGet