Lucene search

K
cve[email protected]CVE-2008-6542
HistoryMar 30, 2009 - 1:30 a.m.

CVE-2008-6542

2009-03-3001:30:00
NVD-CWE-noinfo
web.nvd.nist.gov
23
cve-2008-6542
dotnetnuke
skin manager
remote code execution
htm
html
nvd

7 High

AI Score

Confidence

Low

4.6 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

HIGH

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:H/Au:S/C:P/I:P/A:P

0.006 Low

EPSS

Percentile

77.6%

Unspecified vulnerability in the Skin Manager in DotNetNuke before 4.8.2 allows remote authenticated administrators to perform “server-side execution of application logic” by uploading a static file that is converted into a dynamic script via unknown vectors related to HTM or HTML files.

7 High

AI Score

Confidence

Low

4.6 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

HIGH

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:H/Au:S/C:P/I:P/A:P

0.006 Low

EPSS

Percentile

77.6%

Related for CVE-2008-6542