high7.5
CVE-2008-7102
DotNetNuke 2.0 through 4.8.4 allows remote attackers to load .ascx files instead of skin files, and possibly access privileged functionality, via unknown vecto…
Impact
DotNetNuke 2.0 through 4.8.4 allows remote attackers to load .ascx files instead of skin files, and possibly access privileged functionality, via unknown vectors related to parameter validation.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Dnnsoftware | Dotnetnuke | Versions 2.1.1, 2.1.2, 3.0.7, 3.0.8, 3.0.11, 3.1.0 |
Weakness classification
References
- NVD record
- CVE.org record
- http://osvdb.org/48345
- http://secunia.com/advisories/31893
- http://www.dotnetnuke.com/News/SecurityPolicy/Securitybulletinno23/tabid/1176/Default.aspx
- http://www.securityfocus.com/bid/31145
- https://exchange.xforce.ibmcloud.com/vulnerabilities/45077
- http://osvdb.org/48345
- http://secunia.com/advisories/31893
- http://www.dotnetnuke.com/News/SecurityPolicy/Securitybulletinno23/tabid/1176/Default.aspx
- http://www.securityfocus.com/bid/31145
- https://exchange.xforce.ibmcloud.com/vulnerabilities/45077