please report issues regarding security to our security team: 
security (at) dotnetnuke.com

AFAIK all hackersafe does is run checks against known vulnerabilities, along with a few other common checks for echoed XSS strings. I suspect that they probably compile their known list of vulnerabilities from our security page @ http://www.dotnetnuke.com/News/SecurityPolicy/tabid/940/Default.aspx , or else pull it from security vulnerability sites such as securityfocus (who in turn pull most of their data from the security page on dotnetnuke). From time to time, there will be issues in 3rd party modules, sometimes incorrectly identified as dotnetnuke issues. As such it is useful to check your site and ensure that it's up to date, but in core terms, logging in as host and going to host settings and looking to see if you're up to date (the icon at the top) performs much the same function. I guess the added value from hackersafe is that it's push rather than pull i.e. they email you rather than requiring you to monitor the security rss feed on dotnentuke.com, or check for latest upgrades, as well as checking for 3rd party module issues. Additionally, adding the logo to your site does give your users a better feeling of security.

Note: the above only applies to application security (i.e. dotnetnuke) - tools such as hackersafe also check for exploits dependant on the lack of Microsoft security patches, so it is useful to ensure that your server is up to date.

J.O - I recorded an enhancement request a while back to add an exclusion IP/host list for events, so that urls' such as hackersafe or internal audits via tools such as metasploit etc., could be ran against dotnetnuke sites without logging 1000's of issues. It's not in scope for 5.0, but will probably make the next release after that.

Cathal

Hi

 I not able to add new thread it is currently unavailable, so I am try with this.
 I have the same problem.

 we had faced some cross scripting problem with version DNN 4.8.2 and we read that DNN 4.8.4 has solved that problem, so we had taken decision to upgrade to this version.

After up gradation we are using old database, is it ok? i have create version entry in version table manually, because after running my site it redirects to under construction site page.

Is it solve our cross scripting problem?

Thanks,

 Amruta Taralkar