Django REST framework

Vulnerability Instance

Lookup for vulnerabilities affecting packages.

Vulnerability_idVCID-2dnh-g597-juce
Summary
Inadequate Encryption Strength in DotNetNuke
DNN (aka DotNetNuke) 9.2 through 9.2.2 uses a weak encryption algorithm to protect input parameters. NOTE: this issue exists because of an incomplete fix for CVE-2018-15811.
Aliases
0
alias CVE-2018-18325
1
alias GHSA-j3g9-6fx5-gjv7
Fixed_packages
0
url pkg:nuget/DotNetNuke.Core@9.3.0
purl pkg:nuget/DotNetNuke.Core@9.3.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3b3m-76g5-5kfm
1
vulnerability VCID-3e7c-8uk1-ruch
2
vulnerability VCID-7u59-m3nn-q3gj
3
vulnerability VCID-cs7y-gg46-r3ca
4
vulnerability VCID-e5pw-7tpb-qyb8
5
vulnerability VCID-erck-k36n-2yd2
6
vulnerability VCID-hdn9-z9eh-abfx
7
vulnerability VCID-k8b8-4muv-gye5
8
vulnerability VCID-ky3u-4syg-3yat
9
vulnerability VCID-m5hg-ajyc-3qf1
10
vulnerability VCID-m9cg-wd76-zqcy
11
vulnerability VCID-msru-ycnu-zuhe
12
vulnerability VCID-nn2y-9sk9-kugc
13
vulnerability VCID-pnw1-8knr-7qhc
14
vulnerability VCID-q3bw-2pvk-17dg
15
vulnerability VCID-q97q-u1zk-rqhd
16
vulnerability VCID-qscj-d21p-nfby
17
vulnerability VCID-r799-28wr-23bu
18
vulnerability VCID-s3s5-gwjg-rqgv
19
vulnerability VCID-uc59-7c8z-6kbd
20
vulnerability VCID-v7s2-8wh8-kydw
21
vulnerability VCID-y61z-d6sj-qucc
22
vulnerability VCID-y9ym-w5m9-e3bs
23
vulnerability VCID-zfex-gefk-byfa
resource_url http://public2.vulnerablecode.io/packages/pkg:nuget/DotNetNuke.Core@9.3.0
Affected_packages
0
url pkg:nuget/DotNetNuke.Core@6.0.0
purl pkg:nuget/DotNetNuke.Core@6.0.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-17y1-2fdf-57b1
1
vulnerability VCID-2dnh-g597-juce
2
vulnerability VCID-38yt-swkk-nfbm
3
vulnerability VCID-3b3m-76g5-5kfm
4
vulnerability VCID-3e7c-8uk1-ruch
5
vulnerability VCID-6p55-zzdb-qybq
6
vulnerability VCID-7u59-m3nn-q3gj
7
vulnerability VCID-83xb-rj89-dyeu
8
vulnerability VCID-e5pw-7tpb-qyb8
9
vulnerability VCID-erck-k36n-2yd2
10
vulnerability VCID-f79t-dgkp-f3cy
11
vulnerability VCID-hdn9-z9eh-abfx
12
vulnerability VCID-jqs5-zkws-43bu
13
vulnerability VCID-k8b8-4muv-gye5
14
vulnerability VCID-m5hg-ajyc-3qf1
15
vulnerability VCID-m9cg-wd76-zqcy
16
vulnerability VCID-msru-ycnu-zuhe
17
vulnerability VCID-nn2y-9sk9-kugc
18
vulnerability VCID-p8d6-bm6x-pkge
19
vulnerability VCID-pnw1-8knr-7qhc
20
vulnerability VCID-qscj-d21p-nfby
21
vulnerability VCID-r799-28wr-23bu
22
vulnerability VCID-s3s5-gwjg-rqgv
23
vulnerability VCID-uc59-7c8z-6kbd
24
vulnerability VCID-v7s2-8wh8-kydw
25
vulnerability VCID-xn9v-vadd-zyd1
26
vulnerability VCID-xueu-t4r4-gubs
27
vulnerability VCID-y61z-d6sj-qucc
28
vulnerability VCID-y9ym-w5m9-e3bs
29
vulnerability VCID-zfex-gefk-byfa
resource_url http://public2.vulnerablecode.io/packages/pkg:nuget/DotNetNuke.Core@6.0.0
1
url pkg:nuget/DotNetNuke.Core@7.0.0
purl pkg:nuget/DotNetNuke.Core@7.0.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-17y1-2fdf-57b1
1
vulnerability VCID-2dnh-g597-juce
2
vulnerability VCID-38yt-swkk-nfbm
3
vulnerability VCID-3b3m-76g5-5kfm
4
vulnerability VCID-3e7c-8uk1-ruch
5
vulnerability VCID-6p55-zzdb-qybq
6
vulnerability VCID-7u59-m3nn-q3gj
7
vulnerability VCID-83xb-rj89-dyeu
8
vulnerability VCID-e5pw-7tpb-qyb8
9
vulnerability VCID-erck-k36n-2yd2
10
vulnerability VCID-f79t-dgkp-f3cy
11
vulnerability VCID-hdn9-z9eh-abfx
12
vulnerability VCID-jqs5-zkws-43bu
13
vulnerability VCID-k8b8-4muv-gye5
14
vulnerability VCID-ky3u-4syg-3yat
15
vulnerability VCID-m5hg-ajyc-3qf1
16
vulnerability VCID-m9cg-wd76-zqcy
17
vulnerability VCID-msru-ycnu-zuhe
18
vulnerability VCID-nn2y-9sk9-kugc
19
vulnerability VCID-p8d6-bm6x-pkge
20
vulnerability VCID-pnw1-8knr-7qhc
21
vulnerability VCID-qscj-d21p-nfby
22
vulnerability VCID-r799-28wr-23bu
23
vulnerability VCID-s3s5-gwjg-rqgv
24
vulnerability VCID-uc59-7c8z-6kbd
25
vulnerability VCID-v7s2-8wh8-kydw
26
vulnerability VCID-xn9v-vadd-zyd1
27
vulnerability VCID-y61z-d6sj-qucc
28
vulnerability VCID-y9ym-w5m9-e3bs
29
vulnerability VCID-zfex-gefk-byfa
resource_url http://public2.vulnerablecode.io/packages/pkg:nuget/DotNetNuke.Core@7.0.0
2
url pkg:nuget/DotNetNuke.Core@7.0.6.121
purl pkg:nuget/DotNetNuke.Core@7.0.6.121
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-17y1-2fdf-57b1
1
vulnerability VCID-2dnh-g597-juce
2
vulnerability VCID-38yt-swkk-nfbm
3
vulnerability VCID-3b3m-76g5-5kfm
4
vulnerability VCID-3e7c-8uk1-ruch
5
vulnerability VCID-6p55-zzdb-qybq
6
vulnerability VCID-7u59-m3nn-q3gj
7
vulnerability VCID-83xb-rj89-dyeu
8
vulnerability VCID-e5pw-7tpb-qyb8
9
vulnerability VCID-erck-k36n-2yd2
10
vulnerability VCID-f79t-dgkp-f3cy
11
vulnerability VCID-hdn9-z9eh-abfx
12
vulnerability VCID-jqs5-zkws-43bu
13
vulnerability VCID-k8b8-4muv-gye5
14
vulnerability VCID-ky3u-4syg-3yat
15
vulnerability VCID-m5hg-ajyc-3qf1
16
vulnerability VCID-m9cg-wd76-zqcy
17
vulnerability VCID-msru-ycnu-zuhe
18
vulnerability VCID-nn2y-9sk9-kugc
19
vulnerability VCID-p8d6-bm6x-pkge
20
vulnerability VCID-pnw1-8knr-7qhc
21
vulnerability VCID-qscj-d21p-nfby
22
vulnerability VCID-r799-28wr-23bu
23
vulnerability VCID-s3s5-gwjg-rqgv
24
vulnerability VCID-uc59-7c8z-6kbd
25
vulnerability VCID-v7s2-8wh8-kydw
26
vulnerability VCID-xn9v-vadd-zyd1
27
vulnerability VCID-y61z-d6sj-qucc
28
vulnerability VCID-y9ym-w5m9-e3bs
29
vulnerability VCID-zfex-gefk-byfa
resource_url http://public2.vulnerablecode.io/packages/pkg:nuget/DotNetNuke.Core@7.0.6.121
3
url pkg:nuget/DotNetNuke.Core@7.1.0
purl pkg:nuget/DotNetNuke.Core@7.1.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-17y1-2fdf-57b1
1
vulnerability VCID-2dnh-g597-juce
2
vulnerability VCID-38yt-swkk-nfbm
3
vulnerability VCID-3b3m-76g5-5kfm
4
vulnerability VCID-3e7c-8uk1-ruch
5
vulnerability VCID-6p55-zzdb-qybq
6
vulnerability VCID-7u59-m3nn-q3gj
7
vulnerability VCID-83xb-rj89-dyeu
8
vulnerability VCID-e5pw-7tpb-qyb8
9
vulnerability VCID-erck-k36n-2yd2
10
vulnerability VCID-f79t-dgkp-f3cy
11
vulnerability VCID-hdn9-z9eh-abfx
12
vulnerability VCID-jqs5-zkws-43bu
13
vulnerability VCID-k8b8-4muv-gye5
14
vulnerability VCID-ky3u-4syg-3yat
15
vulnerability VCID-m5hg-ajyc-3qf1
16
vulnerability VCID-m9cg-wd76-zqcy
17
vulnerability VCID-msru-ycnu-zuhe
18
vulnerability VCID-nn2y-9sk9-kugc
19
vulnerability VCID-p8d6-bm6x-pkge
20
vulnerability VCID-pnw1-8knr-7qhc
21
vulnerability VCID-qscj-d21p-nfby
22
vulnerability VCID-r799-28wr-23bu
23
vulnerability VCID-s3s5-gwjg-rqgv
24
vulnerability VCID-uc59-7c8z-6kbd
25
vulnerability VCID-v7s2-8wh8-kydw
26
vulnerability VCID-xn9v-vadd-zyd1
27
vulnerability VCID-y61z-d6sj-qucc
28
vulnerability VCID-y9ym-w5m9-e3bs
29
vulnerability VCID-zfex-gefk-byfa
resource_url http://public2.vulnerablecode.io/packages/pkg:nuget/DotNetNuke.Core@7.1.0
4
url pkg:nuget/DotNetNuke.Core@7.1.2
purl pkg:nuget/DotNetNuke.Core@7.1.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-17y1-2fdf-57b1
1
vulnerability VCID-2dnh-g597-juce
2
vulnerability VCID-38yt-swkk-nfbm
3
vulnerability VCID-3b3m-76g5-5kfm
4
vulnerability VCID-3e7c-8uk1-ruch
5
vulnerability VCID-6p55-zzdb-qybq
6
vulnerability VCID-7u59-m3nn-q3gj
7
vulnerability VCID-83xb-rj89-dyeu
8
vulnerability VCID-e5pw-7tpb-qyb8
9
vulnerability VCID-erck-k36n-2yd2
10
vulnerability VCID-f79t-dgkp-f3cy
11
vulnerability VCID-hdn9-z9eh-abfx
12
vulnerability VCID-jqs5-zkws-43bu
13
vulnerability VCID-k8b8-4muv-gye5
14
vulnerability VCID-ky3u-4syg-3yat
15
vulnerability VCID-m5hg-ajyc-3qf1
16
vulnerability VCID-m9cg-wd76-zqcy
17
vulnerability VCID-msru-ycnu-zuhe
18
vulnerability VCID-nn2y-9sk9-kugc
19
vulnerability VCID-p8d6-bm6x-pkge
20
vulnerability VCID-pnw1-8knr-7qhc
21
vulnerability VCID-qscj-d21p-nfby
22
vulnerability VCID-r799-28wr-23bu
23
vulnerability VCID-s3s5-gwjg-rqgv
24
vulnerability VCID-uc59-7c8z-6kbd
25
vulnerability VCID-v7s2-8wh8-kydw
26
vulnerability VCID-xn9v-vadd-zyd1
27
vulnerability VCID-y61z-d6sj-qucc
28
vulnerability VCID-y9ym-w5m9-e3bs
29
vulnerability VCID-zfex-gefk-byfa
resource_url http://public2.vulnerablecode.io/packages/pkg:nuget/DotNetNuke.Core@7.1.2
5
url pkg:nuget/DotNetNuke.Core@7.2.0.613
purl pkg:nuget/DotNetNuke.Core@7.2.0.613
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-17y1-2fdf-57b1
1
vulnerability VCID-2dnh-g597-juce
2
vulnerability VCID-38yt-swkk-nfbm
3
vulnerability VCID-3b3m-76g5-5kfm
4
vulnerability VCID-3e7c-8uk1-ruch
5
vulnerability VCID-7u59-m3nn-q3gj
6
vulnerability VCID-e5pw-7tpb-qyb8
7
vulnerability VCID-erck-k36n-2yd2
8
vulnerability VCID-f79t-dgkp-f3cy
9
vulnerability VCID-hdn9-z9eh-abfx
10
vulnerability VCID-jqs5-zkws-43bu
11
vulnerability VCID-k8b8-4muv-gye5
12
vulnerability VCID-ky3u-4syg-3yat
13
vulnerability VCID-m5hg-ajyc-3qf1
14
vulnerability VCID-m9cg-wd76-zqcy
15
vulnerability VCID-msru-ycnu-zuhe
16
vulnerability VCID-nn2y-9sk9-kugc
17
vulnerability VCID-pnw1-8knr-7qhc
18
vulnerability VCID-qscj-d21p-nfby
19
vulnerability VCID-r799-28wr-23bu
20
vulnerability VCID-s3s5-gwjg-rqgv
21
vulnerability VCID-uc59-7c8z-6kbd
22
vulnerability VCID-v7s2-8wh8-kydw
23
vulnerability VCID-xn9v-vadd-zyd1
24
vulnerability VCID-y61z-d6sj-qucc
25
vulnerability VCID-y9ym-w5m9-e3bs
26
vulnerability VCID-zfex-gefk-byfa
resource_url http://public2.vulnerablecode.io/packages/pkg:nuget/DotNetNuke.Core@7.2.0.613
6
url pkg:nuget/DotNetNuke.Core@7.3.0.499
purl pkg:nuget/DotNetNuke.Core@7.3.0.499
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-17y1-2fdf-57b1
1
vulnerability VCID-2dnh-g597-juce
2
vulnerability VCID-38yt-swkk-nfbm
3
vulnerability VCID-3b3m-76g5-5kfm
4
vulnerability VCID-3e7c-8uk1-ruch
5
vulnerability VCID-7u59-m3nn-q3gj
6
vulnerability VCID-e5pw-7tpb-qyb8
7
vulnerability VCID-erck-k36n-2yd2
8
vulnerability VCID-f79t-dgkp-f3cy
9
vulnerability VCID-hdn9-z9eh-abfx
10
vulnerability VCID-jqs5-zkws-43bu
11
vulnerability VCID-k8b8-4muv-gye5
12
vulnerability VCID-ky3u-4syg-3yat
13
vulnerability VCID-m5hg-ajyc-3qf1
14
vulnerability VCID-m9cg-wd76-zqcy
15
vulnerability VCID-msru-ycnu-zuhe
16
vulnerability VCID-nn2y-9sk9-kugc
17
vulnerability VCID-pnw1-8knr-7qhc
18
vulnerability VCID-qscj-d21p-nfby
19
vulnerability VCID-r799-28wr-23bu
20
vulnerability VCID-s3s5-gwjg-rqgv
21
vulnerability VCID-uc59-7c8z-6kbd
22
vulnerability VCID-v7s2-8wh8-kydw
23
vulnerability VCID-xn9v-vadd-zyd1
24
vulnerability VCID-y61z-d6sj-qucc
25
vulnerability VCID-y9ym-w5m9-e3bs
26
vulnerability VCID-zfex-gefk-byfa
resource_url http://public2.vulnerablecode.io/packages/pkg:nuget/DotNetNuke.Core@7.3.0.499
7
url pkg:nuget/DotNetNuke.Core@7.3.1.20
purl pkg:nuget/DotNetNuke.Core@7.3.1.20
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-17y1-2fdf-57b1
1
vulnerability VCID-2dnh-g597-juce
2
vulnerability VCID-38yt-swkk-nfbm
3
vulnerability VCID-3b3m-76g5-5kfm
4
vulnerability VCID-3e7c-8uk1-ruch
5
vulnerability VCID-7u59-m3nn-q3gj
6
vulnerability VCID-e5pw-7tpb-qyb8
7
vulnerability VCID-erck-k36n-2yd2
8
vulnerability VCID-f79t-dgkp-f3cy
9
vulnerability VCID-hdn9-z9eh-abfx
10
vulnerability VCID-jqs5-zkws-43bu
11
vulnerability VCID-k8b8-4muv-gye5
12
vulnerability VCID-ky3u-4syg-3yat
13
vulnerability VCID-m5hg-ajyc-3qf1
14
vulnerability VCID-m9cg-wd76-zqcy
15
vulnerability VCID-msru-ycnu-zuhe
16
vulnerability VCID-nn2y-9sk9-kugc
17
vulnerability VCID-pnw1-8knr-7qhc
18
vulnerability VCID-qscj-d21p-nfby
19
vulnerability VCID-r799-28wr-23bu
20
vulnerability VCID-s3s5-gwjg-rqgv
21
vulnerability VCID-uc59-7c8z-6kbd
22
vulnerability VCID-v7s2-8wh8-kydw
23
vulnerability VCID-xn9v-vadd-zyd1
24
vulnerability VCID-y61z-d6sj-qucc
25
vulnerability VCID-y9ym-w5m9-e3bs
26
vulnerability VCID-zfex-gefk-byfa
resource_url http://public2.vulnerablecode.io/packages/pkg:nuget/DotNetNuke.Core@7.3.1.20
8
url pkg:nuget/DotNetNuke.Core@7.4.0.353
purl pkg:nuget/DotNetNuke.Core@7.4.0.353
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-17y1-2fdf-57b1
1
vulnerability VCID-2dnh-g597-juce
2
vulnerability VCID-3b3m-76g5-5kfm
3
vulnerability VCID-3e7c-8uk1-ruch
4
vulnerability VCID-7u59-m3nn-q3gj
5
vulnerability VCID-e5pw-7tpb-qyb8
6
vulnerability VCID-erck-k36n-2yd2
7
vulnerability VCID-f79t-dgkp-f3cy
8
vulnerability VCID-hdn9-z9eh-abfx
9
vulnerability VCID-jqs5-zkws-43bu
10
vulnerability VCID-k8b8-4muv-gye5
11
vulnerability VCID-ky3u-4syg-3yat
12
vulnerability VCID-m5hg-ajyc-3qf1
13
vulnerability VCID-m9cg-wd76-zqcy
14
vulnerability VCID-msru-ycnu-zuhe
15
vulnerability VCID-nn2y-9sk9-kugc
16
vulnerability VCID-pnw1-8knr-7qhc
17
vulnerability VCID-qscj-d21p-nfby
18
vulnerability VCID-r799-28wr-23bu
19
vulnerability VCID-s3s5-gwjg-rqgv
20
vulnerability VCID-uc59-7c8z-6kbd
21
vulnerability VCID-v7s2-8wh8-kydw
22
vulnerability VCID-xn9v-vadd-zyd1
23
vulnerability VCID-y61z-d6sj-qucc
24
vulnerability VCID-y9ym-w5m9-e3bs
25
vulnerability VCID-zfex-gefk-byfa
resource_url http://public2.vulnerablecode.io/packages/pkg:nuget/DotNetNuke.Core@7.4.0.353
9
url pkg:nuget/DotNetNuke.Core@7.4.1.280
purl pkg:nuget/DotNetNuke.Core@7.4.1.280
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2dnh-g597-juce
1
vulnerability VCID-3b3m-76g5-5kfm
2
vulnerability VCID-3e7c-8uk1-ruch
3
vulnerability VCID-7u59-m3nn-q3gj
4
vulnerability VCID-e5pw-7tpb-qyb8
5
vulnerability VCID-erck-k36n-2yd2
6
vulnerability VCID-f79t-dgkp-f3cy
7
vulnerability VCID-hdn9-z9eh-abfx
8
vulnerability VCID-jqs5-zkws-43bu
9
vulnerability VCID-k8b8-4muv-gye5
10
vulnerability VCID-ky3u-4syg-3yat
11
vulnerability VCID-m5hg-ajyc-3qf1
12
vulnerability VCID-m9cg-wd76-zqcy
13
vulnerability VCID-msru-ycnu-zuhe
14
vulnerability VCID-nn2y-9sk9-kugc
15
vulnerability VCID-pnw1-8knr-7qhc
16
vulnerability VCID-qscj-d21p-nfby
17
vulnerability VCID-r799-28wr-23bu
18
vulnerability VCID-s3s5-gwjg-rqgv
19
vulnerability VCID-uc59-7c8z-6kbd
20
vulnerability VCID-v7s2-8wh8-kydw
21
vulnerability VCID-xn9v-vadd-zyd1
22
vulnerability VCID-y61z-d6sj-qucc
23
vulnerability VCID-y9ym-w5m9-e3bs
24
vulnerability VCID-zfex-gefk-byfa
resource_url http://public2.vulnerablecode.io/packages/pkg:nuget/DotNetNuke.Core@7.4.1.280
10
url pkg:nuget/DotNetNuke.Core@7.4.2.216
purl pkg:nuget/DotNetNuke.Core@7.4.2.216
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2dnh-g597-juce
1
vulnerability VCID-3b3m-76g5-5kfm
2
vulnerability VCID-3e7c-8uk1-ruch
3
vulnerability VCID-7u59-m3nn-q3gj
4
vulnerability VCID-e5pw-7tpb-qyb8
5
vulnerability VCID-erck-k36n-2yd2
6
vulnerability VCID-f79t-dgkp-f3cy
7
vulnerability VCID-hdn9-z9eh-abfx
8
vulnerability VCID-jqs5-zkws-43bu
9
vulnerability VCID-k8b8-4muv-gye5
10
vulnerability VCID-ky3u-4syg-3yat
11
vulnerability VCID-m5hg-ajyc-3qf1
12
vulnerability VCID-m9cg-wd76-zqcy
13
vulnerability VCID-msru-ycnu-zuhe
14
vulnerability VCID-nn2y-9sk9-kugc
15
vulnerability VCID-pnw1-8knr-7qhc
16
vulnerability VCID-qscj-d21p-nfby
17
vulnerability VCID-r799-28wr-23bu
18
vulnerability VCID-s3s5-gwjg-rqgv
19
vulnerability VCID-uc59-7c8z-6kbd
20
vulnerability VCID-v7s2-8wh8-kydw
21
vulnerability VCID-xn9v-vadd-zyd1
22
vulnerability VCID-y61z-d6sj-qucc
23
vulnerability VCID-y9ym-w5m9-e3bs
24
vulnerability VCID-zfex-gefk-byfa
resource_url http://public2.vulnerablecode.io/packages/pkg:nuget/DotNetNuke.Core@7.4.2.216
11
url pkg:nuget/DotNetNuke.Core@8.0.0.809
purl pkg:nuget/DotNetNuke.Core@8.0.0.809
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2dnh-g597-juce
1
vulnerability VCID-3b3m-76g5-5kfm
2
vulnerability VCID-3e7c-8uk1-ruch
3
vulnerability VCID-7u59-m3nn-q3gj
4
vulnerability VCID-e5pw-7tpb-qyb8
5
vulnerability VCID-erck-k36n-2yd2
6
vulnerability VCID-f79t-dgkp-f3cy
7
vulnerability VCID-hdn9-z9eh-abfx
8
vulnerability VCID-jqs5-zkws-43bu
9
vulnerability VCID-k8b8-4muv-gye5
10
vulnerability VCID-ky3u-4syg-3yat
11
vulnerability VCID-m5hg-ajyc-3qf1
12
vulnerability VCID-m9cg-wd76-zqcy
13
vulnerability VCID-msru-ycnu-zuhe
14
vulnerability VCID-nn2y-9sk9-kugc
15
vulnerability VCID-pnw1-8knr-7qhc
16
vulnerability VCID-qscj-d21p-nfby
17
vulnerability VCID-r799-28wr-23bu
18
vulnerability VCID-s3s5-gwjg-rqgv
19
vulnerability VCID-uc59-7c8z-6kbd
20
vulnerability VCID-v7s2-8wh8-kydw
21
vulnerability VCID-xn9v-vadd-zyd1
22
vulnerability VCID-y61z-d6sj-qucc
23
vulnerability VCID-y9ym-w5m9-e3bs
24
vulnerability VCID-zfex-gefk-byfa
resource_url http://public2.vulnerablecode.io/packages/pkg:nuget/DotNetNuke.Core@8.0.0.809
12
url pkg:nuget/DotNetNuke.Core@8.0.1.239
purl pkg:nuget/DotNetNuke.Core@8.0.1.239
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2dnh-g597-juce
1
vulnerability VCID-3b3m-76g5-5kfm
2
vulnerability VCID-3e7c-8uk1-ruch
3
vulnerability VCID-7u59-m3nn-q3gj
4
vulnerability VCID-e5pw-7tpb-qyb8
5
vulnerability VCID-erck-k36n-2yd2
6
vulnerability VCID-f79t-dgkp-f3cy
7
vulnerability VCID-hdn9-z9eh-abfx
8
vulnerability VCID-k8b8-4muv-gye5
9
vulnerability VCID-ky3u-4syg-3yat
10
vulnerability VCID-m5hg-ajyc-3qf1
11
vulnerability VCID-m9cg-wd76-zqcy
12
vulnerability VCID-msru-ycnu-zuhe
13
vulnerability VCID-nn2y-9sk9-kugc
14
vulnerability VCID-pnw1-8knr-7qhc
15
vulnerability VCID-qscj-d21p-nfby
16
vulnerability VCID-r799-28wr-23bu
17
vulnerability VCID-s3s5-gwjg-rqgv
18
vulnerability VCID-uc59-7c8z-6kbd
19
vulnerability VCID-v7s2-8wh8-kydw
20
vulnerability VCID-xn9v-vadd-zyd1
21
vulnerability VCID-y61z-d6sj-qucc
22
vulnerability VCID-y9ym-w5m9-e3bs
23
vulnerability VCID-zfex-gefk-byfa
resource_url http://public2.vulnerablecode.io/packages/pkg:nuget/DotNetNuke.Core@8.0.1.239
13
url pkg:nuget/DotNetNuke.Core@8.0.2.4
purl pkg:nuget/DotNetNuke.Core@8.0.2.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2dnh-g597-juce
1
vulnerability VCID-3b3m-76g5-5kfm
2
vulnerability VCID-3e7c-8uk1-ruch
3
vulnerability VCID-7u59-m3nn-q3gj
4
vulnerability VCID-e5pw-7tpb-qyb8
5
vulnerability VCID-erck-k36n-2yd2
6
vulnerability VCID-f79t-dgkp-f3cy
7
vulnerability VCID-hdn9-z9eh-abfx
8
vulnerability VCID-k8b8-4muv-gye5
9
vulnerability VCID-ky3u-4syg-3yat
10
vulnerability VCID-m5hg-ajyc-3qf1
11
vulnerability VCID-m9cg-wd76-zqcy
12
vulnerability VCID-msru-ycnu-zuhe
13
vulnerability VCID-nn2y-9sk9-kugc
14
vulnerability VCID-pnw1-8knr-7qhc
15
vulnerability VCID-qscj-d21p-nfby
16
vulnerability VCID-r799-28wr-23bu
17
vulnerability VCID-s3s5-gwjg-rqgv
18
vulnerability VCID-uc59-7c8z-6kbd
19
vulnerability VCID-v7s2-8wh8-kydw
20
vulnerability VCID-xn9v-vadd-zyd1
21
vulnerability VCID-y61z-d6sj-qucc
22
vulnerability VCID-y9ym-w5m9-e3bs
23
vulnerability VCID-zfex-gefk-byfa
resource_url http://public2.vulnerablecode.io/packages/pkg:nuget/DotNetNuke.Core@8.0.2.4
14
url pkg:nuget/DotNetNuke.Core@8.0.3.5
purl pkg:nuget/DotNetNuke.Core@8.0.3.5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2dnh-g597-juce
1
vulnerability VCID-3b3m-76g5-5kfm
2
vulnerability VCID-3e7c-8uk1-ruch
3
vulnerability VCID-7u59-m3nn-q3gj
4
vulnerability VCID-e5pw-7tpb-qyb8
5
vulnerability VCID-erck-k36n-2yd2
6
vulnerability VCID-f79t-dgkp-f3cy
7
vulnerability VCID-hdn9-z9eh-abfx
8
vulnerability VCID-k8b8-4muv-gye5
9
vulnerability VCID-ky3u-4syg-3yat
10
vulnerability VCID-m5hg-ajyc-3qf1
11
vulnerability VCID-m9cg-wd76-zqcy
12
vulnerability VCID-msru-ycnu-zuhe
13
vulnerability VCID-nn2y-9sk9-kugc
14
vulnerability VCID-pnw1-8knr-7qhc
15
vulnerability VCID-qscj-d21p-nfby
16
vulnerability VCID-r799-28wr-23bu
17
vulnerability VCID-s3s5-gwjg-rqgv
18
vulnerability VCID-uc59-7c8z-6kbd
19
vulnerability VCID-v7s2-8wh8-kydw
20
vulnerability VCID-xn9v-vadd-zyd1
21
vulnerability VCID-y61z-d6sj-qucc
22
vulnerability VCID-y9ym-w5m9-e3bs
23
vulnerability VCID-zfex-gefk-byfa
resource_url http://public2.vulnerablecode.io/packages/pkg:nuget/DotNetNuke.Core@8.0.3.5
15
url pkg:nuget/DotNetNuke.Core@8.0.4.226
purl pkg:nuget/DotNetNuke.Core@8.0.4.226
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2dnh-g597-juce
1
vulnerability VCID-3b3m-76g5-5kfm
2
vulnerability VCID-3e7c-8uk1-ruch
3
vulnerability VCID-7u59-m3nn-q3gj
4
vulnerability VCID-e5pw-7tpb-qyb8
5
vulnerability VCID-erck-k36n-2yd2
6
vulnerability VCID-f79t-dgkp-f3cy
7
vulnerability VCID-hdn9-z9eh-abfx
8
vulnerability VCID-k8b8-4muv-gye5
9
vulnerability VCID-ky3u-4syg-3yat
10
vulnerability VCID-m5hg-ajyc-3qf1
11
vulnerability VCID-m9cg-wd76-zqcy
12
vulnerability VCID-msru-ycnu-zuhe
13
vulnerability VCID-nn2y-9sk9-kugc
14
vulnerability VCID-pnw1-8knr-7qhc
15
vulnerability VCID-qscj-d21p-nfby
16
vulnerability VCID-r799-28wr-23bu
17
vulnerability VCID-s3s5-gwjg-rqgv
18
vulnerability VCID-uc59-7c8z-6kbd
19
vulnerability VCID-v7s2-8wh8-kydw
20
vulnerability VCID-xn9v-vadd-zyd1
21
vulnerability VCID-y61z-d6sj-qucc
22
vulnerability VCID-y9ym-w5m9-e3bs
23
vulnerability VCID-zfex-gefk-byfa
resource_url http://public2.vulnerablecode.io/packages/pkg:nuget/DotNetNuke.Core@8.0.4.226
16
url pkg:nuget/DotNetNuke.Core@9.0.0.1002
purl pkg:nuget/DotNetNuke.Core@9.0.0.1002
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2dnh-g597-juce
1
vulnerability VCID-3b3m-76g5-5kfm
2
vulnerability VCID-3e7c-8uk1-ruch
3
vulnerability VCID-7u59-m3nn-q3gj
4
vulnerability VCID-cs7y-gg46-r3ca
5
vulnerability VCID-e5pw-7tpb-qyb8
6
vulnerability VCID-erck-k36n-2yd2
7
vulnerability VCID-f79t-dgkp-f3cy
8
vulnerability VCID-hdn9-z9eh-abfx
9
vulnerability VCID-k8b8-4muv-gye5
10
vulnerability VCID-ky3u-4syg-3yat
11
vulnerability VCID-m5hg-ajyc-3qf1
12
vulnerability VCID-m9cg-wd76-zqcy
13
vulnerability VCID-msru-ycnu-zuhe
14
vulnerability VCID-nn2y-9sk9-kugc
15
vulnerability VCID-pnw1-8knr-7qhc
16
vulnerability VCID-q3bw-2pvk-17dg
17
vulnerability VCID-q97q-u1zk-rqhd
18
vulnerability VCID-qscj-d21p-nfby
19
vulnerability VCID-r799-28wr-23bu
20
vulnerability VCID-s3s5-gwjg-rqgv
21
vulnerability VCID-uc59-7c8z-6kbd
22
vulnerability VCID-v7s2-8wh8-kydw
23
vulnerability VCID-xn9v-vadd-zyd1
24
vulnerability VCID-y61z-d6sj-qucc
25
vulnerability VCID-y9ym-w5m9-e3bs
26
vulnerability VCID-zfex-gefk-byfa
resource_url http://public2.vulnerablecode.io/packages/pkg:nuget/DotNetNuke.Core@9.0.0.1002
17
url pkg:nuget/DotNetNuke.Core@9.0.1.142
purl pkg:nuget/DotNetNuke.Core@9.0.1.142
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2dnh-g597-juce
1
vulnerability VCID-3b3m-76g5-5kfm
2
vulnerability VCID-3e7c-8uk1-ruch
3
vulnerability VCID-7u59-m3nn-q3gj
4
vulnerability VCID-cs7y-gg46-r3ca
5
vulnerability VCID-e5pw-7tpb-qyb8
6
vulnerability VCID-erck-k36n-2yd2
7
vulnerability VCID-f79t-dgkp-f3cy
8
vulnerability VCID-hdn9-z9eh-abfx
9
vulnerability VCID-k8b8-4muv-gye5
10
vulnerability VCID-ky3u-4syg-3yat
11
vulnerability VCID-m5hg-ajyc-3qf1
12
vulnerability VCID-m9cg-wd76-zqcy
13
vulnerability VCID-msru-ycnu-zuhe
14
vulnerability VCID-nn2y-9sk9-kugc
15
vulnerability VCID-pnw1-8knr-7qhc
16
vulnerability VCID-q3bw-2pvk-17dg
17
vulnerability VCID-q97q-u1zk-rqhd
18
vulnerability VCID-qscj-d21p-nfby
19
vulnerability VCID-r799-28wr-23bu
20
vulnerability VCID-s3s5-gwjg-rqgv
21
vulnerability VCID-uc59-7c8z-6kbd
22
vulnerability VCID-v7s2-8wh8-kydw
23
vulnerability VCID-xn9v-vadd-zyd1
24
vulnerability VCID-y61z-d6sj-qucc
25
vulnerability VCID-y9ym-w5m9-e3bs
26
vulnerability VCID-zfex-gefk-byfa
resource_url http://public2.vulnerablecode.io/packages/pkg:nuget/DotNetNuke.Core@9.0.1.142
18
url pkg:nuget/DotNetNuke.Core@9.1.0.367
purl pkg:nuget/DotNetNuke.Core@9.1.0.367
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2dnh-g597-juce
1
vulnerability VCID-3b3m-76g5-5kfm
2
vulnerability VCID-3e7c-8uk1-ruch
3
vulnerability VCID-7u59-m3nn-q3gj
4
vulnerability VCID-cs7y-gg46-r3ca
5
vulnerability VCID-e5pw-7tpb-qyb8
6
vulnerability VCID-erck-k36n-2yd2
7
vulnerability VCID-f79t-dgkp-f3cy
8
vulnerability VCID-hdn9-z9eh-abfx
9
vulnerability VCID-k8b8-4muv-gye5
10
vulnerability VCID-ky3u-4syg-3yat
11
vulnerability VCID-m5hg-ajyc-3qf1
12
vulnerability VCID-m9cg-wd76-zqcy
13
vulnerability VCID-msru-ycnu-zuhe
14
vulnerability VCID-nn2y-9sk9-kugc
15
vulnerability VCID-pnw1-8knr-7qhc
16
vulnerability VCID-q3bw-2pvk-17dg
17
vulnerability VCID-q97q-u1zk-rqhd
18
vulnerability VCID-qscj-d21p-nfby
19
vulnerability VCID-r799-28wr-23bu
20
vulnerability VCID-s3s5-gwjg-rqgv
21
vulnerability VCID-uc59-7c8z-6kbd
22
vulnerability VCID-v7s2-8wh8-kydw
23
vulnerability VCID-xn9v-vadd-zyd1
24
vulnerability VCID-y61z-d6sj-qucc
25
vulnerability VCID-y9ym-w5m9-e3bs
26
vulnerability VCID-zfex-gefk-byfa
resource_url http://public2.vulnerablecode.io/packages/pkg:nuget/DotNetNuke.Core@9.1.0.367
19
url pkg:nuget/DotNetNuke.Core@9.1.1.129
purl pkg:nuget/DotNetNuke.Core@9.1.1.129
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2dnh-g597-juce
1
vulnerability VCID-3b3m-76g5-5kfm
2
vulnerability VCID-3e7c-8uk1-ruch
3
vulnerability VCID-7u59-m3nn-q3gj
4
vulnerability VCID-cs7y-gg46-r3ca
5
vulnerability VCID-e5pw-7tpb-qyb8
6
vulnerability VCID-erck-k36n-2yd2
7
vulnerability VCID-hdn9-z9eh-abfx
8
vulnerability VCID-k8b8-4muv-gye5
9
vulnerability VCID-ky3u-4syg-3yat
10
vulnerability VCID-m5hg-ajyc-3qf1
11
vulnerability VCID-m9cg-wd76-zqcy
12
vulnerability VCID-msru-ycnu-zuhe
13
vulnerability VCID-nn2y-9sk9-kugc
14
vulnerability VCID-pnw1-8knr-7qhc
15
vulnerability VCID-q3bw-2pvk-17dg
16
vulnerability VCID-q97q-u1zk-rqhd
17
vulnerability VCID-qscj-d21p-nfby
18
vulnerability VCID-r799-28wr-23bu
19
vulnerability VCID-s3s5-gwjg-rqgv
20
vulnerability VCID-uc59-7c8z-6kbd
21
vulnerability VCID-v7s2-8wh8-kydw
22
vulnerability VCID-xn9v-vadd-zyd1
23
vulnerability VCID-y61z-d6sj-qucc
24
vulnerability VCID-y9ym-w5m9-e3bs
25
vulnerability VCID-zfex-gefk-byfa
resource_url http://public2.vulnerablecode.io/packages/pkg:nuget/DotNetNuke.Core@9.1.1.129
20
url pkg:nuget/DotNetNuke.Core@9.2.0.366
purl pkg:nuget/DotNetNuke.Core@9.2.0.366
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2dnh-g597-juce
1
vulnerability VCID-3b3m-76g5-5kfm
2
vulnerability VCID-3e7c-8uk1-ruch
3
vulnerability VCID-7u59-m3nn-q3gj
4
vulnerability VCID-cs7y-gg46-r3ca
5
vulnerability VCID-dnf9-9hrt-1qfx
6
vulnerability VCID-e5pw-7tpb-qyb8
7
vulnerability VCID-erck-k36n-2yd2
8
vulnerability VCID-hdn9-z9eh-abfx
9
vulnerability VCID-jw1r-pvtw-d3bz
10
vulnerability VCID-k8b8-4muv-gye5
11
vulnerability VCID-ky3u-4syg-3yat
12
vulnerability VCID-m5hg-ajyc-3qf1
13
vulnerability VCID-m9cg-wd76-zqcy
14
vulnerability VCID-msru-ycnu-zuhe
15
vulnerability VCID-nn2y-9sk9-kugc
16
vulnerability VCID-pnw1-8knr-7qhc
17
vulnerability VCID-q3bw-2pvk-17dg
18
vulnerability VCID-q97q-u1zk-rqhd
19
vulnerability VCID-qscj-d21p-nfby
20
vulnerability VCID-r799-28wr-23bu
21
vulnerability VCID-s3s5-gwjg-rqgv
22
vulnerability VCID-uc59-7c8z-6kbd
23
vulnerability VCID-uk5d-ubkt-6fhn
24
vulnerability VCID-v7s2-8wh8-kydw
25
vulnerability VCID-y61z-d6sj-qucc
26
vulnerability VCID-y9ym-w5m9-e3bs
27
vulnerability VCID-zfex-gefk-byfa
resource_url http://public2.vulnerablecode.io/packages/pkg:nuget/DotNetNuke.Core@9.2.0.366
21
url pkg:nuget/DotNetNuke.Core@9.2.1.533
purl pkg:nuget/DotNetNuke.Core@9.2.1.533
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2dnh-g597-juce
1
vulnerability VCID-3b3m-76g5-5kfm
2
vulnerability VCID-3e7c-8uk1-ruch
3
vulnerability VCID-7u59-m3nn-q3gj
4
vulnerability VCID-cs7y-gg46-r3ca
5
vulnerability VCID-dnf9-9hrt-1qfx
6
vulnerability VCID-e5pw-7tpb-qyb8
7
vulnerability VCID-erck-k36n-2yd2
8
vulnerability VCID-hdn9-z9eh-abfx
9
vulnerability VCID-k8b8-4muv-gye5
10
vulnerability VCID-ky3u-4syg-3yat
11
vulnerability VCID-m5hg-ajyc-3qf1
12
vulnerability VCID-m9cg-wd76-zqcy
13
vulnerability VCID-msru-ycnu-zuhe
14
vulnerability VCID-nn2y-9sk9-kugc
15
vulnerability VCID-pnw1-8knr-7qhc
16
vulnerability VCID-q3bw-2pvk-17dg
17
vulnerability VCID-q97q-u1zk-rqhd
18
vulnerability VCID-qscj-d21p-nfby
19
vulnerability VCID-r799-28wr-23bu
20
vulnerability VCID-s3s5-gwjg-rqgv
21
vulnerability VCID-uc59-7c8z-6kbd
22
vulnerability VCID-uk5d-ubkt-6fhn
23
vulnerability VCID-v7s2-8wh8-kydw
24
vulnerability VCID-y61z-d6sj-qucc
25
vulnerability VCID-y9ym-w5m9-e3bs
26
vulnerability VCID-zfex-gefk-byfa
resource_url http://public2.vulnerablecode.io/packages/pkg:nuget/DotNetNuke.Core@9.2.1.533
References
0
reference_url http://packetstormsecurity.com/files/157080/DotNetNuke-Cookie-Deserialization-Remote-Code-Execution.html
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:H
2
value HIGH
scoring_system generic_textual
scoring_elements
3
value Attend
scoring_system ssvc
scoring_elements SSVCv2/E:A/A:Y/T:P/P:M/B:A/M:M/D:A/2025-02-04T20:15:01Z/
url http://packetstormsecurity.com/files/157080/DotNetNuke-Cookie-Deserialization-Remote-Code-Execution.html
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2018-18325
reference_id
reference_type
scores
0
value 0.92916
scoring_system epss
scoring_elements 0.9978
published_at 2026-06-04T12:55:00Z
1
value 0.92916
scoring_system epss
scoring_elements 0.99781
published_at 2026-06-07T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2018-18325
2
reference_url https://github.com/dnnsoftware/Dnn.Platform
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/dnnsoftware/Dnn.Platform
3
reference_url https://github.com/dnnsoftware/Dnn.Platform/releases
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:H
1
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
2
value HIGH
scoring_system generic_textual
scoring_elements
3
value Attend
scoring_system ssvc
scoring_elements SSVCv2/E:A/A:Y/T:P/P:M/B:A/M:M/D:A/2025-02-04T20:15:01Z/
url https://github.com/dnnsoftware/Dnn.Platform/releases
4
reference_url https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2018-18325
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2018-18325
5
reference_url https://www.dnnsoftware.com/community/security/security-center
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:H
1
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
2
value HIGH
scoring_system generic_textual
scoring_elements
3
value Attend
scoring_system ssvc
scoring_elements SSVCv2/E:A/A:Y/T:P/P:M/B:A/M:M/D:A/2025-02-04T20:15:01Z/
url https://www.dnnsoftware.com/community/security/security-center
6
reference_url https://nvd.nist.gov/vuln/detail/CVE-2018-18325
reference_id CVE-2018-18325
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2018-18325
7
reference_url https://github.com/advisories/GHSA-j3g9-6fx5-gjv7
reference_id GHSA-j3g9-6fx5-gjv7
reference_type
scores
0
value HIGH
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-j3g9-6fx5-gjv7
Weaknesses
0
cwe_id 326
name Inadequate Encryption Strength
description The product stores or transmits sensitive data using an encryption scheme that is theoretically sound, but is not strong enough for the level of protection required.
1
cwe_id 937
name OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities
description Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2013.
2
cwe_id 1035
name OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities
description Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2017.
Exploits
0
date_added null
description 
This module exploits a deserialization vulnerability in DotNetNuke (DNN) versions 5.0.0 to 9.3.0-RC.
          Vulnerable versions store profile information for users in the DNNPersonalization cookie as XML.
          The expected structure includes a "type" attribute to instruct the server which type of object to create on deserialization.
          The cookie is processed by the application whenever it attempts to load the current user's profile data.
          This occurs when DNN is configured to handle 404 errors with its built-in error page (default configuration).
          An attacker can leverage this vulnerability to execute arbitrary code on the system.
required_action null
due_date null
notes 
Stability:
  - crash-safe
Reliability:
  - repeatable-session
SideEffects: []
known_ransomware_campaign_use false
source_date_published 2017-07-20
exploit_type null
platform Windows
source_date_updated null
data_source Metasploit
source_url https://github.com/rapid7/metasploit-framework/tree/master/modules/exploits/windows/http/dnn_cookie_deserialization_rce.rb
1
date_added 2020-04-16
description DotNetNuke - Cookie Deserialization Remote Code Execution (Metasploit)
required_action null
due_date null
notes null
known_ransomware_campaign_use true
source_date_published 2020-04-16
exploit_type remote
platform windows
source_date_updated 2020-04-16
data_source Exploit-DB
source_url https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/windows/http/dnn_cookie_deserialization_rce.rb
2
date_added 2021-11-03
description DotNetNuke (DNN) contains an inadequate encryption strength vulnerability resulting from the use of a weak encryption algorithm to protect input parameters. This CVE ID resolves an incomplete patch for CVE-2018-15811.
required_action Apply updates per vendor instructions.
due_date 2022-05-03
notes https://nvd.nist.gov/vuln/detail/CVE-2018-18325
known_ransomware_campaign_use false
source_date_published null
exploit_type null
platform null
source_date_updated null
data_source KEV
source_url null
Severity_range_score7.0 - 8.9
Exploitability2.0
Weighted_severity8.0
Risk_score10.0
Resource_urlhttp://public2.vulnerablecode.io/vulnerabilities/VCID-2dnh-g597-juce