CVE-2010-4514

Cross-site scripting (XSS) vulnerability in Install/InstallWizard.aspx in DotNetNuke 5.05.01 and 5.06.00 allows remote attackers to inject arbitrary web script or HTML via the __VIEWSTATE parameter. NOTE: some of these details are obtained from third party information.
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:dotnetnuke:dotnetnuke:5.05.01:*:*:*:*:*:*:*
cpe:2.3:a:dotnetnuke:dotnetnuke:5.06.00:*:*:*:*:*:*:*

History

No history.

Information

Published : 2010-12-09 21:00

Updated : 2024-02-04 17:54


NVD link : CVE-2010-4514

Mitre link : CVE-2010-4514

CVE.ORG link : CVE-2010-4514


JSON object : View

Products Affected

dotnetnuke

  • dotnetnuke
CWE
CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')