CVE-2008-6542 | BDVDB-2026-35791 Detail

Description#

Unspecified vulnerability in the Skin Manager in DotNetNuke before 4.8.2 allows remote authenticated administrators to perform "server-side execution of application logic" by uploading a static file that is converted into a dynamic script via unknown vectors related to HTM or HTML files.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www.dotnetnuke.com/News/SecurityBulletins/SecurityBulletinno13/tabid/1149/Default.aspx
https://exchange.xforce.ibmcloud.com/vulnerabilities/49767
http://secunia.com/advisories/29488
http://www.securityfocus.com/bid/28438
http://osvdb.org/43721

Exploit#

No public exploit known

History#

Version 12009-03-30Record published in the CVE List.
Version 22024-08-07Most recent update recorded in the CVE List.