CVEvulnerability
CVE-2006-4973
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2006-09-25
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
Description
Cross-site scripting (XSS) vulnerability in Default.aspx in Perpetual Motion Interactive Systems DotNetNuke before 3.3.5, and 4.x before 4.3.5, allows remote attackers to inject arbitrary HTML via the error parameter.
Affected configurations
• dnnsoftware dotnetnuke 1.0.6
• dnnsoftware dotnetnuke 1.0.7
• dnnsoftware dotnetnuke 1.0.8
• dnnsoftware dotnetnuke 1.0.9
• dnnsoftware dotnetnuke 1.0.10d
• dnnsoftware dotnetnuke 1.0.10e
• dnnsoftware dotnetnuke 2.1.1
• dnnsoftware dotnetnuke 2.1.2
• dnnsoftware dotnetnuke 3.0.7
• dnnsoftware dotnetnuke 3.0.8
• dnnsoftware dotnetnuke 3.1.0
• dnnsoftware dotnetnuke 4.0
References
- http://secunia.com/advisories/22051 secunia.com
- http://www.dotnetnuke.com/About/WhatIsDotNetNuke/SecurityPolicy/SecurityBulletinno3/tabid/990/Default.aspx Patch, Vendor Advisory
- http://www.secureshapes.com/advisories/vuln20-09-2006.htm Exploit, Patch, Vendor Advisory, URL Repurposed
- http://www.securityfocus.com/bid/20117 Exploit
- http://www.vupen.com/english/advisories/2006/3734 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/29048 exchange.xforce.ibmcloud.com
- http://secunia.com/advisories/22051 secunia.com
- http://www.dotnetnuke.com/About/WhatIsDotNetNuke/SecurityPolicy/SecurityBulletinno3/tabid/990/Default.aspx Patch, Vendor Advisory
- http://www.secureshapes.com/advisories/vuln20-09-2006.htm Exploit, Patch, Vendor Advisory, URL Repurposed
- http://www.securityfocus.com/bid/20117 Exploit
- http://www.vupen.com/english/advisories/2006/3734 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/29048 exchange.xforce.ibmcloud.com