Unscored severity · published Jul 18, 2006
CVE-2006-3601
** UNVERIFIABLE ** Unspecified vulnerability in an unspecified DNN Modules module for DotNetNuke (.net nuke) allows remote attackers to gain privileges via unspecified vectors,…
–
CVSS
2.4%
EPSS
No
On KEV
Description
** UNVERIFIABLE ** Unspecified vulnerability in an unspecified DNN Modules module for DotNetNuke (.net nuke) allows remote attackers to gain privileges via unspecified vectors, as used in an attack against the Microsoft France web site. NOTE: due to the lack of details and uncertainty about which product is affected, this claim is not independently verifiable.
Exploitation
Is it being used?
Exploit prediction (EPSS)2.4% · higher than 84% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
DO
Dotnetnuke · Dnnsoftware
All versions, or not specified · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2006-3601
CVE.org
https://www.cve.org/CVERecord?id=CVE-2006-3601
securitytracker.com
http://securitytracker.com/id?1016332
www.securityfocus.com
http://www.securityfocus.com/bid/18522
www.zone-h.org
http://www.zone-h.org/content/view/4770/31/
More from Dotnetnuke
8.8
CVE-2017-9822
DNN (aka DotNetNuke) before 9.1.1 has Remote Code Execution via a cookie, aka "2017-08 (Critical) Possible remote code execution on DNN sites."
7.5
CVE-2018-18325
DotNetNuke (DNN) Inadequate Encryption Strength Vulnerability
7.5
CVE-2018-15811
DNN (aka DotNetNuke) 9.2 through 9.2.1 uses a weak encryption algorithm to protect input parameters
9.8
CVE-2025-64095
DNN Insufficient Access Control - Image Upload allows for Site Content Overwrite
9.8
CVE-2015-2794
The installation wizard in DotNetNuke (DNN) before 7.4.1 allows remote attackers to reinstall the application and gain SuperUser access via a direct request to…