← Volver a CVEs
CVE-2006-4973
N/ADescripcion
Cross-site scripting (XSS) vulnerability in Default.aspx in Perpetual Motion Interactive Systems DotNetNuke before 3.3.5, and 4.x before 4.3.5, allows remote attackers to inject arbitrary HTML via the error parameter.
Detalles CVE
Puntuacion CVSS v3.1N/A
Publicado9/25/2006
Ultima modificacion4/16/2026
Fuentenvd
Avistamientos honeypot0
Productos afectados
dotnetnuke:dotnetnuke
Referencias
http://secunia.com/advisories/22051(cve@mitre.org)
http://www.dotnetnuke.com/About/WhatIsDotNetNuke/SecurityPolicy/SecurityBulletinno3/tabid/990/Default.aspx(cve@mitre.org)
http://www.secureshapes.com/advisories/vuln20-09-2006.htm(cve@mitre.org)
http://www.securityfocus.com/bid/20117(cve@mitre.org)
http://www.vupen.com/english/advisories/2006/3734(cve@mitre.org)
https://exchange.xforce.ibmcloud.com/vulnerabilities/29048(cve@mitre.org)
http://secunia.com/advisories/22051(af854a3a-2127-422b-91ae-364da2661108)
http://www.dotnetnuke.com/About/WhatIsDotNetNuke/SecurityPolicy/SecurityBulletinno3/tabid/990/Default.aspx(af854a3a-2127-422b-91ae-364da2661108)
http://www.secureshapes.com/advisories/vuln20-09-2006.htm(af854a3a-2127-422b-91ae-364da2661108)
http://www.securityfocus.com/bid/20117(af854a3a-2127-422b-91ae-364da2661108)
http://www.vupen.com/english/advisories/2006/3734(af854a3a-2127-422b-91ae-364da2661108)
https://exchange.xforce.ibmcloud.com/vulnerabilities/29048(af854a3a-2127-422b-91ae-364da2661108)
Correlaciones IOC
Sin correlaciones registradas
This product uses data from the NVD API but is not endorsed or certified by the NVD.