The version of DNN Platform (formerly DotNetNuke) running on the remote host is 5.2.0 or later but prior to 9.1.1. It is, therefore, affected by multiple vulnerabilities :

  - A remote code execution vulnerability exists due to     insecure use of web cookies to identify users. An     unauthenticated, remote attacker can exploit this, by     impersonating a user and uploading malicious code to the     server, to execute arbitrary code. This vulnerability     affects all versions from 7.0.0 to 9.1.0.

  - A flaw exists due to an overly permissive HTML5 message     posting policy when handling cross-document messaging.
    An unauthenticated, remote attacker can exploit this to     conduct a spoofing attack or to disclose sensitive     information. This vulnerability affects all versions     from 8.0.0 to 9.1.0.

  - A cross-site redirection vulnerability exists due to     improper validation of user-supplied input before     returning it to users. An unauthenticated, remote     attacker can exploit this, by convincing a user to     follow a specially crafted link, to redirect users to a     website of the attacker's choosing. This vulnerability     affects all versions from 7.0.0 to 9.1.0.

  - A remote code execution vulnerability exists due to a     failure to properly validate file types and extensions     for uploaded files before placing them in a     user-accessible path. An authenticated, remote attacker     can exploit this to execute arbitrary code with the     privileges of the web service. This vulnerability     affects all versions from 5.2.0 to 9.1.0.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

DNN (DotNetNuke) 5.2.0 < 9.1.1 Multiple Vulnerabilities

high Nessus Plugin ID 101397

Version 1.16

Version 1.15

Version 1.16 Jun 5, 2024, 1:32 PM Required Scan configuration ("Enable cgi scanning" set to "True") Plugin Feed: 202406051332
Version 1.15 Apr 25, 2023, 11:11 PM CVSS temporal metrics (Adjust exploitability metrics for CISA KEV vulnerabilities) Plugin Feed: 202304252311