CVE-2012-1036
11.04.2012, 10:39
Cross-site scripting (XSS) vulnerability in the telerik HTML editor in DotNetNuke before 5.6.4 and 6.x before 6.1.0 allows remote attackers to inject arbitrary web script or HTML via a message.
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| dotnetnuke | dotnetnuke | 𝑥 ≤ 5.6.3 |
| dotnetnuke | dotnetnuke | 4.9.0 |
| dotnetnuke | dotnetnuke | 4.9.1 |
| dotnetnuke | dotnetnuke | 4.9.2 |
| dotnetnuke | dotnetnuke | 4.9.3 |
| dotnetnuke | dotnetnuke | 4.9.4 |
| dotnetnuke | dotnetnuke | 4.9.5 |
| dotnetnuke | dotnetnuke | 5.0.0 |
| dotnetnuke | dotnetnuke | 5.0.1 |
| dotnetnuke | dotnetnuke | 5.1.0 |
| dotnetnuke | dotnetnuke | 5.1.1 |
| dotnetnuke | dotnetnuke | 5.1.2 |
| dotnetnuke | dotnetnuke | 5.1.3 |
| dotnetnuke | dotnetnuke | 5.1.4 |
| dotnetnuke | dotnetnuke | 5.2.0 |
| dotnetnuke | dotnetnuke | 5.2.1 |
| dotnetnuke | dotnetnuke | 5.2.2 |
| dotnetnuke | dotnetnuke | 5.2.3 |
| dotnetnuke | dotnetnuke | 5.3.0 |
| dotnetnuke | dotnetnuke | 5.3.1 |
| dotnetnuke | dotnetnuke | 5.4.0 |
| dotnetnuke | dotnetnuke | 5.4.1 |
| dotnetnuke | dotnetnuke | 5.4.2 |
| dotnetnuke | dotnetnuke | 5.4.3 |
| dotnetnuke | dotnetnuke | 5.4.4 |
| dotnetnuke | dotnetnuke | 5.5.0 |
| dotnetnuke | dotnetnuke | 5.5.1 |
| dotnetnuke | dotnetnuke | 5.6.0 |
| dotnetnuke | dotnetnuke | 5.6.1 |
| dotnetnuke | dotnetnuke | 5.6.2 |
| dotnetnuke | dotnetnuke | 6.0.0 |
| dotnetnuke | dotnetnuke | 6.0.1 |
| dotnetnuke | dotnetnuke | 6.0.2 |
𝑥
= Vulnerable software versions