description: DNN (aka DotNetNuke) before 9.1.1 has Remote Code Execution via a cookie, aka "2017-08 (Critical) Possible remote code execution on DNN sites."
problem types: Remote Code Execution via untrusted deserialization of Xml data
affected:
{
product: DotNetNuke CMS Fixed in 9.1.1
vendor: DotNetNuke
versions:
status: affected, version: DotNetNuke CMS Fixed in 9.1.1
}