CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2006-4973

Cross-site scripting (XSS) vulnerability in Default.aspx in Perpetual Motion Interactive Systems DotNetNuke before 3.3.5, and 4.x before 4.3.5, allows remote attackers to inject arbitrary HTML via the error parameter.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.01

EPSS Ranking 76.5%

CVSS Severity

CVSS v2 Score 4.3

References

Products affected by CVE-2006-4973

Dotnetnuke » Dotnetnuke » Version: 1.0.10d

cpe:2.3:a:dotnetnuke:dotnetnuke:1.0.10d
Dotnetnuke » Dotnetnuke » Version: 1.0.10e

cpe:2.3:a:dotnetnuke:dotnetnuke:1.0.10e
Dotnetnuke » Dotnetnuke » Version: 1.0.6

cpe:2.3:a:dotnetnuke:dotnetnuke:1.0.6
Dotnetnuke » Dotnetnuke » Version: 1.0.7

cpe:2.3:a:dotnetnuke:dotnetnuke:1.0.7
Dotnetnuke » Dotnetnuke » Version: 1.0.8

cpe:2.3:a:dotnetnuke:dotnetnuke:1.0.8
Dotnetnuke » Dotnetnuke » Version: 1.0.9

cpe:2.3:a:dotnetnuke:dotnetnuke:1.0.9
Dotnetnuke » Dotnetnuke » Version: 2.1.1

cpe:2.3:a:dotnetnuke:dotnetnuke:2.1.1
Dotnetnuke » Dotnetnuke » Version: 2.1.2

cpe:2.3:a:dotnetnuke:dotnetnuke:2.1.2
Dotnetnuke » Dotnetnuke » Version: 3.0.7

cpe:2.3:a:dotnetnuke:dotnetnuke:3.0.7
Dotnetnuke » Dotnetnuke » Version: 3.0.8

cpe:2.3:a:dotnetnuke:dotnetnuke:3.0.8
Dotnetnuke » Dotnetnuke » Version: 3.1.0

cpe:2.3:a:dotnetnuke:dotnetnuke:3.1.0
Dotnetnuke » Dotnetnuke » Version: 4.0

cpe:2.3:a:dotnetnuke:dotnetnuke:4.0

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2006-4973

Products

Pricing

Contact Us