Unscored severity · published Feb 1, 2007
CVE-2007-0660
Cross-site scripting (XSS) vulnerability in the IFrame module before 03.02.01 for DotNetNuke (DNN) allows remote attackers to inject arbitrary web script or HTML via unspecified…
–
CVSS
1.2%
EPSS
No
On KEV
Description
Cross-site scripting (XSS) vulnerability in the IFrame module before 03.02.01 for DotNetNuke (DNN) allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to "Pass through values."
Exploitation
Is it being used?
Exploit prediction (EPSS)1.2% · higher than 69% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
DI
Dotnetnuke Iframe · Dotnetnuke
through 03.01.01; 03.02.00 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2007-0660
CVE.org
https://www.cve.org/CVERecord?id=CVE-2007-0660
osvdb.org
http://osvdb.org/36476
www.dotnetnuke.com
http://www.dotnetnuke.com/Default.aspx?tabid=825&EntryID=1278
www.securityfocus.com
http://www.securityfocus.com/bid/22334
www.vupen.com
http://www.vupen.com/english/advisories/2007/0433
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/32037