Lucene search

[email protected]CVE-2008-6542

HistoryMar 30, 2009 - 1:30 a.m.

CVE-2008-6542

2009-03-3001:30:00

[email protected]

web.nvd.nist.gov

cve-2008-6542

dotnetnuke

skin manager

remote code execution

htm

html

nvd

4.6 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:H/Au:S/C:P/I:P/A:P

6.3 Medium

AI Score

Confidence

Low

0.006 Low

EPSS

Percentile

77.8%

JSON

Unspecified vulnerability in the Skin Manager in DotNetNuke before 4.8.2 allows remote authenticated administrators to perform “server-side execution of application logic” by uploading a static file that is converted into a dynamic script via unknown vectors related to HTM or HTML files.

Affected configurations

NVD

Node

dotnetnukedotnetnukeRange≤4.8.1

dotnetnukedotnetnukeMatch1.0.6

dotnetnukedotnetnukeMatch1.0.7

dotnetnukedotnetnukeMatch1.0.8

dotnetnukedotnetnukeMatch1.0.9

dotnetnukedotnetnukeMatch1.0.10d

dotnetnukedotnetnukeMatch1.0.10e

dotnetnukedotnetnukeMatch2.1.1

dotnetnukedotnetnukeMatch2.1.2

dotnetnukedotnetnukeMatch3.0.7

dotnetnukedotnetnukeMatch3.0.8

dotnetnukedotnetnukeMatch3.0.11

dotnetnukedotnetnukeMatch3.1.0

dotnetnukedotnetnukeMatch4.0

dotnetnukedotnetnukeMatch4.5.2

CPENameOperatorVersion
dotnetnuke:dotnetnukedotnetnukele4.8.1
dotnetnuke:dotnetnukedotnetnukeeq1.0.6
dotnetnuke:dotnetnukedotnetnukeeq1.0.7
dotnetnuke:dotnetnukedotnetnukeeq1.0.8
dotnetnuke:dotnetnukedotnetnukeeq1.0.9
dotnetnuke:dotnetnukedotnetnukeeq1.0.10d
dotnetnuke:dotnetnukedotnetnukeeq1.0.10e
dotnetnuke:dotnetnukedotnetnukeeq2.1.1
dotnetnuke:dotnetnukedotnetnukeeq2.1.2
dotnetnuke:dotnetnukedotnetnukeeq3.0.7

CPE	Name	Operator	Version
dotnetnuke:dotnetnuke	dotnetnuke	le	4.8.1
dotnetnuke:dotnetnuke	dotnetnuke	eq	1.0.6
dotnetnuke:dotnetnuke	dotnetnuke	eq	1.0.7
dotnetnuke:dotnetnuke	dotnetnuke	eq	1.0.8
dotnetnuke:dotnetnuke	dotnetnuke	eq	1.0.9
dotnetnuke:dotnetnuke	dotnetnuke	eq	1.0.10d
dotnetnuke:dotnetnuke	dotnetnuke	eq	1.0.10e
dotnetnuke:dotnetnuke	dotnetnuke	eq	2.1.1
dotnetnuke:dotnetnuke	dotnetnuke	eq	2.1.2
dotnetnuke:dotnetnuke	dotnetnuke	eq	3.0.7

Rows per page:

1-10 of 151

References

osvdb.org/43721

secunia.com/advisories/29488

www.dotnetnuke.com/News/SecurityBulletins/SecurityBulletinno13/tabid/1149/Default.aspx

www.securityfocus.com/bid/28438

exchange.xforce.ibmcloud.com/vulnerabilities/49767

4.6 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:H/Au:S/C:P/I:P/A:P

6.3 Medium

AI Score

Confidence

Low

0.006 Low

EPSS

Percentile

77.8%

JSON

Related for CVE-2008-6542

cvelist1 prion1 nvd1