CVEvulnerability
CVE-2013-7335
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2014-03-12
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-20
Description
Open redirect vulnerability in DotNetNuke (DNN) before 6.2.9 and 7.x before 7.1.1 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors.
Affected configurations
• dnnsoftware dotnetnuke (<= 6.2.8)
• dnnsoftware dotnetnuke 1.0.6
• dnnsoftware dotnetnuke 1.0.7
• dnnsoftware dotnetnuke 1.0.8
• dnnsoftware dotnetnuke 1.0.9
• dnnsoftware dotnetnuke 1.0.10d
• dnnsoftware dotnetnuke 1.0.10e
• dnnsoftware dotnetnuke 2.1.1
• dnnsoftware dotnetnuke 2.1.2
• dnnsoftware dotnetnuke 3.0.7
• dnnsoftware dotnetnuke 3.0.8
• dnnsoftware dotnetnuke 3.0.11
• dnnsoftware dotnetnuke 3.1.0
• dnnsoftware dotnetnuke 3.3.5
• dnnsoftware dotnetnuke 4.0
• dnnsoftware dotnetnuke 4.3.5
• dnnsoftware dotnetnuke 4.4.1
• dnnsoftware dotnetnuke 4.5.2
• dnnsoftware dotnetnuke 4.5.4
• dnnsoftware dotnetnuke 4.5.5
• dnnsoftware dotnetnuke 4.6.0
• dnnsoftware dotnetnuke 4.6.1
• dnnsoftware dotnetnuke 4.6.2
• dnnsoftware dotnetnuke 4.7.0
• dnnsoftware dotnetnuke 4.8.0
• dnnsoftware dotnetnuke 4.8.1
• dnnsoftware dotnetnuke 4.8.2
• dnnsoftware dotnetnuke 4.8.3
• dnnsoftware dotnetnuke 4.8.4
• dnnsoftware dotnetnuke 4.9
• dnnsoftware dotnetnuke 4.9.1
• dnnsoftware dotnetnuke 4.9.2
• dnnsoftware dotnetnuke 5.0
• dnnsoftware dotnetnuke 5.1
• dnnsoftware dotnetnuke 5.1.1
• dnnsoftware dotnetnuke 5.1.2
• dnnsoftware dotnetnuke 5.1.3
• dnnsoftware dotnetnuke 5.1.4
• dnnsoftware dotnetnuke 5.05.01
• dnnsoftware dotnetnuke 5.06.00
• dnnsoftware dotnetnuke 6.0.0
• dnnsoftware dotnetnuke 6.0.1
• dnnsoftware dotnetnuke 6.0.2
• dnnsoftware dotnetnuke 6.1.0
• dnnsoftware dotnetnuke 6.1.1
• dnnsoftware dotnetnuke 6.1.2
• dnnsoftware dotnetnuke 6.1.3
• dnnsoftware dotnetnuke 6.1.4
• dnnsoftware dotnetnuke 6.1.5
• dnnsoftware dotnetnuke 6.2.0
• dnnsoftware dotnetnuke 6.2.1
• dnnsoftware dotnetnuke 6.2.2
• dnnsoftware dotnetnuke 6.2.3
• dnnsoftware dotnetnuke 6.2.4
• dnnsoftware dotnetnuke 6.2.5
• dnnsoftware dotnetnuke 6.2.6
• dnnsoftware dotnetnuke 6.2.7
• dnnsoftware dotnetnuke 7.0.0
• dnnsoftware dotnetnuke 7.0.1
• dnnsoftware dotnetnuke 7.0.2
… and 5 more
Related
Weakness · CWE (1)
- CWE-20 Improper Input Validation weakness
References
- http://secunia.com/advisories/53493 Vendor Advisory
- http://www.dnnsoftware.com/platform/manage/security-center Patch, Vendor Advisory
- http://www.securityfocus.com/bid/61809 www.securityfocus.com
- http://secunia.com/advisories/53493 Vendor Advisory
- http://www.dnnsoftware.com/platform/manage/security-center Patch, Vendor Advisory
- http://www.securityfocus.com/bid/61809 www.securityfocus.com