CVE-2009-4109 | BDVDB-2026-39423 Detail

Description#

The install wizard in DotNetNuke 4.0 through 5.1.4 does not prevent anonymous users from accessing functionality related to determination of the need for an upgrade, which allows remote attackers to access version information and possibly other sensitive information.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://secunia.com/advisories/37480
http://www.securityfocus.com/bid/37139
http://www.dotnetnuke.com/News/SecurityPolicy/securitybulletinno30/tabid/1449/Default.aspx
http://osvdb.org/60520

Exploit#

No public exploit known

History#

Version 12009-11-28Record published in the CVE List.
Version 22024-09-16Most recent update recorded in the CVE List.