Skip to content
OpenAdvisories

Vendor

dnnsoftware

34 known vulnerabilities.

2 results · Clear filters · Feed

  • Critical 10.0
    CVE-2025-64095 Public exploit EPSS 47%

    DNN Insufficient Access Control - Image Upload allows for Site Content Overwrite

    DNN (formerly DotNetNuke) is an open-source web content management platform (CMS) in the Microsoft ecosystem. Prior to 10.1.1, the default HTML editor provider allows unauthenticated file uploads and images can overwrite existing files. An unauthenticated use…

  • High 8.6
    CVE-2025-52488 Public exploit EPSS 36%

    DNN.PLATFORM leaks NTLM hash via SMB Share Interaction with malicious user input

    DNN (formerly DotNetNuke) is an open-source web content management platform (CMS) in the Microsoft ecosystem. In versions 6.0.0 to before 10.0.1, DNN.PLATFORM allows a specially crafted series of malicious interaction to potentially expose NTLM hashes to a th…