I am not disappointed with the response of the DotNetNuke team. I don't see what else they could have done in this situation.

I can think of a number of things PowerDNN could have done.

I have now called Tony Valenti by telephone and had a brief conversation. He explained the nature of the vulnerability and until I receive more specific details which allow me to reproduce the exploit, I do not want to comment on severity. One thing which Tony did indicate is that the exploit does not allow an anonymous user to execute ARBITRARY SQL script or modify the web.config in an ARBITRARY manner. This is an extremely important detail which was missing from the previous information released by PowerDNN. Tony has promised to send full details of the exploit to security@dotnetnuke.com . I will let you know when we receive it.

Hi All,

I am not a community individual, but a business individual.  The fact of the matter is that DotNetNuke is OpenSource and donates a product to a community of individuals.  PowerDNN is a business centric company.  What you people don't understand, is that as a business owner, I only care about business continuity.  The fact that I don't have to worry about the security of my site while hosted at PowerDNN is priceless.