Detections
Analytics
DNN (DotNetNuke) < 7.2.2 Unspecified XSS
low Nessus Plugin ID 73160
Language:
Synopsis
The remote web server contains an ASP.NET application that is affected by a cross-site scripting vulnerability.Description
The version of DNN installed on the remote host is affected by a unspecified cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input.Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.
Solution
Upgrade to DNN version 7.2.2 or later.See Also
https://www.dnnsoftware.com/community/security/security-center
Plugin Details
Severity: Low
ID: 73160
File Name: dotnetnuke_7_2_2.nasl
Version: 1.15
Type: remote
Family: CGI abuses : XSS
Published: 3/24/2014
Updated: 6/5/2024
Configuration: Enable thorough checks
Supported Sensors: Nessus
Enable CGI Scanning: true
Vulnerability Information
CPE: cpe:/a:dotnetnuke:dotnetnuke
Required KB Items: installed_sw/DNN
Excluded KB Items: Settings/disable_cgi_scanning
Exploit Ease: No known exploits are available
Patch Publication Date: 3/19/2014
Vulnerability Publication Date: 3/19/2014
Reference Information
BID: 66342