CVE-2009-4110

Published: Nov 29, 2009Modified: Apr 24, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

Cross-site scripting (XSS) vulnerability in the search functionality in DotNetNuke 4.8 through 5.1.4 allows remote attackers to inject arbitrary web script or HTML via search terms that are not properly filtered before display in a custom results page.

Affected (14)

Products: Dnnsoftware: Dotnetnuke

Dnnsoftware

1 product

Dotnetnuke

Configuration A

14 vulnerable

Vulnerable Software	Affected Versions
Dnnsoftware Dotnetnuke	Version 4.8.0
Dnnsoftware Dotnetnuke	Version 4.8.1
Dnnsoftware Dotnetnuke	Version 4.8.2
Dnnsoftware Dotnetnuke	Version 4.8.3
Dnnsoftware Dotnetnuke	Version 4.8.4
Dnnsoftware Dotnetnuke	Version 4.9.1
Dnnsoftware Dotnetnuke	Version 4.9.2
Dnnsoftware Dotnetnuke	Version 4.9
Dnnsoftware Dotnetnuke	Version 5.0
Dnnsoftware Dotnetnuke	Version 5.1.1
Dnnsoftware Dotnetnuke	Version 5.1.2
Dnnsoftware Dotnetnuke	Version 5.1.3
Dnnsoftware Dotnetnuke	Version 5.1.4
Dnnsoftware Dotnetnuke	Version 5.1