Input Validation and Logic

Every one of the 5 is a mark on the map. Named now: 1 to 5, most at risk first.

1. DotNetNuke 2.0 through 4.8.4 allows remote attackers to load .ascx files instead of skin files, and possibly access privileged functionality, via unknown vectors related to parame…CVE-2008-7102Dnnsoftware · 1.4% likely

   CWE-20

2. Open redirect vulnerability in DotNetNuke (DNN) before 6.2.9 and 7.x before 7.1.1 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via…CVE-2013-7335Dnnsoftware · 1.2% likely

   CWE-20

3. Unrestricted file upload vulnerability in the file manager module in DotNetNuke before 4.8.2 allows remote administrators to upload arbitrary files and gain privileges to the serv…CVE-2008-6541Dnnsoftware · 1.0% likely

   CWE-20

4. Unexpected external content may be displayed in DNN ImageHandlerCVE-2025-32371dnnsoftware · CVSS 4.3 · 0.3% likely

   CWE-451

5. Dnn.Platform's Site Import could use an external source with a crafted requestCVE-2025-48376dnnsoftware · CVSS 3.5 · 0.3% likely

   CWE-841

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.