Lucene search
Veracode Vulnerability DatabaseVERACODE:20650HistoryJul 04, 2019 - 3:23 a.m.
Information Disclosure
2019-07-0403:23:34
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
28
EPSS
0.052
Percentile
93.1%
Dnn.Platform is vulnerable to information disclosure. The vulnerability is due to the incomplete fix of CVE-2018-15811 where it encrypts the input parameters using a weak encryption algorithm during the installation.
Related
cisa_kev
cisa_kev
DotNetNuke (DNN) Inadequate Encryption Strength Vulnerability
2021-11-03 00:00:00
DotNetNuke (DNN) Inadequate Encryption Strength Vulnerability
2021-11-03 00:00:00
cvelist
cvelist
CVE-2018-18325
2019-07-03 16:37:17
CVE-2018-15811
2019-07-03 16:23:27
cve
cve
CVE-2018-18325
2019-07-03 17:15:10
CVE-2018-15811
2019-07-03 17:15:10
osv
osv
CVE-2018-18325
2019-07-03 17:15:10
Inadequate Encryption Strength in DotNetNuke
2019-07-05 21:08:16
CVE-2018-15811
2019-07-03 17:15:10
prion
prion
Code injection
2019-07-03 17:15:00
Design/Logic Flaw
2019-07-03 17:15:00
nessus
nessus
DNN (DotNetNuke) 9.2 <= 9.2.2 Weak Encryption Algorithm Vulnerability
2021-10-29 00:00:00
attackerkb
attackerkb
CVE-2018-18325
2019-07-03 00:00:00
github
github
Inadequate Encryption Strength in DotNetNuke
2019-07-05 21:08:16
Inadequate Encryption Strength in DotNetNuke
2019-07-05 21:08:36
nvd
nvd
CVE-2018-18325
2019-07-03 17:15:10
CVE-2018-15811
2019-07-03 17:15:10
openvas
openvas
DotNetNuke < 9.3.0 Multiple Vulnerabilities
2022-08-08 00:00:00
DotNetNuke 9.2.x < 9.2.2 Multiple Vulnerabilities
2022-08-08 00:00:00
exploitdb
exploitdb
DotNetNuke - Cookie Deserialization Remote Code Execution (Metasploit)
2020-04-16 00:00:00
zdt
zdt
DotNetNuke Cookie Deserialization Remote Code Execution Exploit
2020-04-03 00:00:00
metasploit
metasploit
DotNetNuke Cookie Deserialization Remote Code Excecution
2019-07-16 16:16:53
packetstorm
packetstorm
DotNetNuke Cookie Deserialization Remote Code Execution
2020-04-03 00:00:00
checkpoint_advisories
checkpoint_advisories
Dnnsoftware DotNetNuke Remote Code Execution (CVE-2018-15811)
2021-12-16 00:00:00
veracode
veracode
Information Disclosure
2019-07-04 04:08:03