PT-2006-5716 · Perpetual Motion Interactive Systems · Dotnetnuke

Published 2006-09-25 · Updated 2024-02-14 · CVE-2006-4973

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Perpetual Motion Interactive Systems DotNetNuke versions prior to 3.3.5 Perpetual Motion Interactive Systems DotNetNuke versions 4.x prior to 4.3.5

Description A cross-site scripting issue allows remote attackers to inject arbitrary HTML via the error parameter in the Default.aspx file.

Recommendations For versions prior to 3.3.5, update to version 3.3.5 or later. For versions 4.x prior to 4.3.5, update to version 4.3.5 or later.

Exploit

Fix

Related Identifiers

CVE-2006-4973

Affected Products

Dotnetnuke

References · 9

• 🔥 http://secureshapes.com/advisories/vuln20-09-2006.htm · Exploit
• 🔥 https://exploit-db.com/exploits/28615 · Exploit
• 🔥 http://securityfocus.com/bid/20117 · Exploit
• http://dotnetnuke.com/About/WhatIsDotNetNuke/SecurityPolicy/SecurityBulletinno3/tabid/990/Default.aspx · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2006-4973 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/29048 · Note
• http://secunia.com/advisories/22051 · Note
• http://vupen.com/english/advisories/2006/3734 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-4973 · Note