Detections
Analytics
DNN (DotNetNuke) 7.0.x < 7.0.6 Unspecified Modal Window XSS
medium Nessus Plugin ID 66755
Language:
Synopsis
The remote web server contains an ASP.NET application that is affected by a cross-site scripting vulnerability.Description
The version of DNN installed on the remote host is affected by a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. The vulnerability exists due to a flaw in the code used to generate the pop-up modal windows.Note also that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.
Solution
Upgrade to DNN version 7.0.6 or later.See Also
http://www.nessus.org/u?c4369717
https://www.dnnsoftware.com/community/security/security-center
Plugin Details
Severity: Medium
ID: 66755
File Name: dotnetnuke_7_0_6_xss.nasl
Version: 1.13
Type: remote
Family: CGI abuses : XSS
Published: 6/3/2013
Updated: 6/5/2024
Configuration: Enable thorough checks
Supported Sensors: Nessus
Enable CGI Scanning: true
Vulnerability Information
CPE: cpe:/a:dotnetnuke:dotnetnuke
Required KB Items: installed_sw/DNN
Excluded KB Items: Settings/disable_cgi_scanning
Exploit Available: true
Exploit Ease: Exploits are available
Patch Publication Date: 5/2/2013
Vulnerability Publication Date: 5/2/2013
Reference Information
BID: 59627