Description (CNA)
DNN (aka DotNetNuke) before 9.1.1 has Remote Code Execution via a cookie, aka "2017-08 (Critical) Possible remote code execution on DNN sites."
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| DotNetNuke / DotNetNuke CMS Fixed in 9.1.1 | affected DotNetNuke CMS Fixed in 9.1.1 |
CWE
No CWE identifiers supplied.
References
- http://www.securityfocus.com/bid/102213
- http://www.dnnsoftware.com/community/security/security-center
- http://packetstormsecurity.com/files/157080/DotNetNuke-Cookie-Deserialization-Remote-Code-Execution.html
ADP enrichment
No English description supplied.
No English description supplied.