|
3551
|
- |
|
dnnsoftware
|
dotnetnuke
|
** NO VERIFICABLE ** Vulnerabilidad no especificada en en un módulo DNN Modules no especificado para DotNetNuke (.net nuke) permiten a atacantes remotos obtener privilegios mediante vectores no espec…
|
NVD-CWE-Other
|
CVE-2006-3601
|
2026-04-25 02:34 |
2006-07-19 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
3552
|
- |
|
dnnsoftware
|
dotnetnuke
|
Cross-site scripting (XSS) vulnerability in Default.aspx in Perpetual Motion Interactive Systems DotNetNuke before 3.3.5, and 4.x before 4.3.5, allows remote attackers to inject arbitrary HTML via th…
|
NVD-CWE-Other
|
CVE-2006-4973
|
2026-04-25 02:34 |
2006-09-25 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
3553
|
- |
|
dnnsoftware
|
dotnetnuke
|
Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en Default.aspx en Perpetual Motion Interactive Systems DotNetNuke anteriores a 3.3.5, y 4.x anteriores a 4.3.5, permite a un atacant…
|
NVD-CWE-Other
|
CVE-2006-4973
|
2026-04-25 02:34 |
2006-09-25 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
3554
|
- |
|
dnnsoftware
|
dotnetnuke
|
Unspecified vulnerability in DotNetNuke 4.5.2 through 4.9 allows remote attackers to "add additional roles to their user account" via unknown attack vectors.
|
CWE-264
Permissions, Privileges, and Access Controls
|
CVE-2008-6399
|
2026-04-25 02:34 |
2009-03-6 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
3555
|
- |
|
dnnsoftware
|
dotnetnuke
|
Vulnerabilidad no especificada en DotNetNuke v4.5.2 hasta v4.9 permite a atacantes remotos "añadir reglas adicionales de sus cuentas de usuario" a través de vectores de ataque desconocidos.
|
CWE-264
Permissions, Privileges, and Access Controls
|
CVE-2008-6399
|
2026-04-25 02:34 |
2009-03-6 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
3556
|
- |
|
dnnsoftware
|
dotnetnuke
|
DotNetNuke before 4.8.2, during installation or upgrade, does not warn the administrator when the default (1) ValidationKey and (2) DecryptionKey values cannot be modified in the web.config file, whi…
|
CWE-264
Permissions, Privileges, and Access Controls
|
CVE-2008-6540
|
2026-04-25 02:34 |
2009-03-30 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
3557
|
- |
|
dnnsoftware
|
dotnetnuke
|
DotNetNuke anteriores a v4.8.2, durante la instalación o actualización, no avisan al administrador que los valores (1) ValidationKey y (2) DecryptionKey no pueden ser modificados en el fichero web.…
|
CWE-264
Permissions, Privileges, and Access Controls
|
CVE-2008-6540
|
2026-04-25 02:34 |
2009-03-30 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
3558
|
- |
|
dnnsoftware
|
dotnetnuke
|
Unrestricted file upload vulnerability in the file manager module in DotNetNuke before 4.8.2 allows remote administrators to upload arbitrary files and gain privileges to the server via unspecified v…
|
CWE-20
Improper Input Validation
|
CVE-2008-6541
|
2026-04-25 02:34 |
2009-03-30 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
3559
|
- |
|
dnnsoftware
|
dotnetnuke
|
Vulnerabilidad de envío de archivo no restringido en el módulo de gestión en DotNetNuke anterior a v4.8.2, permite a administradores remotos la subida de archivos de su elección y la elevación de pri…
|
CWE-20
Improper Input Validation
|
CVE-2008-6541
|
2026-04-25 02:34 |
2009-03-30 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
3560
|
- |
|
dnnsoftware
|
dotnetnuke
|
Unspecified vulnerability in the Skin Manager in DotNetNuke before 4.8.2 allows remote authenticated administrators to perform "server-side execution of application logic" by uploading a static file …
|
NVD-CWE-noinfo
|
CVE-2008-6542
|
2026-04-25 02:34 |
2009-03-30 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|