Vulnerability Intelligence Report
CVE-2006-3601
** UNVERIFIABLE ** Unspecified vulnerability in an unspecified DNN Modules module for DotNetNuke (.net nuke) allows remote attackers to gain privileges via unspecified vectors, as used in an attack against the Microsoft France web site. NOTE: due to the lack of details and uncertainty about which product is affected, this claim is not independently verifiable.
No Active Exploit Signals
CVSS Base Score
10.0
HIGH
EPSS Probability:2.43%
Executive Threat Verdict
Evaluating...
Evaluating Threat Landscape...
Assessing known weaponization, exploitation telemetry, and federal advisories.
Attack Surface
—
Authentication
—
Weaponization
—
SSVC Action
—
Affected Products & Versions
| Vendor | Product | Affected Versions |
|---|---|---|
| dnnsoftware | dotnetnuke | all |
References & Technical Advisories
No reference links found.
Threat Intelligence Signals
EPSS Score
2.425%
GitHub Advisory
Identity & Timeline
| Status | PUBLISHED |
| Assigning Authority | MITRE Corporation · N/A · USA |
| Reserved | 2006-07-14T00:00:00 |
| Published | 2006-07-14T20:00:00 |
| Patch Date | 2006-06-27 |
| Last Updated | 2024-08-07T18:39:52 |
Community Chatter & Buzz