Secunia Security Advisory - A weakness and some vulnerabilities have been reported in DotNetNuke, which can be exploited by malicious users to disclose potentially sensitive information and conduct script insertion attacks and by malicious people to conduct cross-site scripting attacks and bypass certain security restrictions.
3f71f385618b83d19dabec7f09744d3e1f53d5b05c8b534f77ce5b57c923b164