Cross-site scripting (XSS) vulnerability in DotNetNuke (DNN) before 6.2.9 and 7.x before 7.1.1 allows remote attackers to inject arbitrary web script or HTML via the __dnnVariable parameter to the default URI.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - Cross-site scripting (XSS) vulnerability in DotNetNuke (DNN) before 6.2.9 and 7.x before 7.1.1 allows
    remote attackers to inject arbitrary web script or HTML via the __dnnVariable parameter to the default
    URI. (CVE-2013-4649)

The version of DNN installed on the remote host is affected by multiple vulnerabilities :

  - The application is affected by a persistent cross-site     scripting vulnerability because input to the     'Display Name' in the 'Manage Profile' view is not     properly sanitized. (CVE-2013-3943)

  - The application is affected by a cross-site scripting     vulnerability because user-supplied input to the     '__dnnVariable' parameter is not properly sanitized.
    (CVE-2013-4649)

  - An unspecified open redirect flaw exists that can     allow an attacker to perform a phishing attack by     enticing a user to click on a malicious URL.
    (CVE-2013-7335)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of DNN installed on the remote host is affected by a cross-site scripting vulnerability due to a failure to properly sanitize user-supplied input to the ' __dnnVariable' parameter. An unauthenticated, remote attacker can exploit this, via a specially crafted request, to inject arbitrary HTML and script code into a user's browser to be executed within the security context of the affected site.

Note that the application is reportedly also affected by an additional cross-site scripting issue as well as a redirect error that can lead to phishing attacks; however, Nessus has not tested for these additional issues.

ID	Name	Product	Family	Type	Severity
433140	SCA: security update for DotNetNuke.Core (GHSA-rvrj-j7cc-236p)	Tenable Cloud Security	SCA Checks	Local	medium
433140	SCA: security update for DotNetNuke.Core (GHSA-rvrj-j7cc-236p)	Tenable Self-Hosted Container Security	SCA Checks	Local	medium
70294	DNN (DotNetNuke) < 6.2.9 / 7.1.1 Multiple Vulnerabilities	Nessus	CGI abuses	Remote	medium
69400	DNN (DotNetNuke) __dnnVariable Parameter XSS	Nessus	CGI abuses : XSS	Remote	medium

Detections

Analytics

CVE-2013-4649

medium

Tenable Plugins

medium

medium

medium

medium