Lucene search

K
nvd[email protected]NVD:CVE-2008-6542
HistoryMar 30, 2009 - 1:30 a.m.

CVE-2008-6542

2009-03-3001:30:00
web.nvd.nist.gov
2

CVSS2

4.6

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:H/Au:S/C:P/I:P/A:P

AI Score

6.1

Confidence

Low

EPSS

0.006

Percentile

77.7%

Unspecified vulnerability in the Skin Manager in DotNetNuke before 4.8.2 allows remote authenticated administrators to perform “server-side execution of application logic” by uploading a static file that is converted into a dynamic script via unknown vectors related to HTM or HTML files.

Affected configurations

Nvd
Node
dotnetnukedotnetnukeRange4.8.1
OR
dotnetnukedotnetnukeMatch1.0.6
OR
dotnetnukedotnetnukeMatch1.0.7
OR
dotnetnukedotnetnukeMatch1.0.8
OR
dotnetnukedotnetnukeMatch1.0.9
OR
dotnetnukedotnetnukeMatch1.0.10d
OR
dotnetnukedotnetnukeMatch1.0.10e
OR
dotnetnukedotnetnukeMatch2.1.1
OR
dotnetnukedotnetnukeMatch2.1.2
OR
dotnetnukedotnetnukeMatch3.0.7
OR
dotnetnukedotnetnukeMatch3.0.8
OR
dotnetnukedotnetnukeMatch3.0.11
OR
dotnetnukedotnetnukeMatch3.1.0
OR
dotnetnukedotnetnukeMatch4.0
OR
dotnetnukedotnetnukeMatch4.5.2
VendorProductVersionCPE
dotnetnukedotnetnuke*cpe:2.3:a:dotnetnuke:dotnetnuke:*:*:*:*:*:*:*:*
dotnetnukedotnetnuke1.0.6cpe:2.3:a:dotnetnuke:dotnetnuke:1.0.6:*:*:*:*:*:*:*
dotnetnukedotnetnuke1.0.7cpe:2.3:a:dotnetnuke:dotnetnuke:1.0.7:*:*:*:*:*:*:*
dotnetnukedotnetnuke1.0.8cpe:2.3:a:dotnetnuke:dotnetnuke:1.0.8:*:*:*:*:*:*:*
dotnetnukedotnetnuke1.0.9cpe:2.3:a:dotnetnuke:dotnetnuke:1.0.9:*:*:*:*:*:*:*
dotnetnukedotnetnuke1.0.10dcpe:2.3:a:dotnetnuke:dotnetnuke:1.0.10d:*:*:*:*:*:*:*
dotnetnukedotnetnuke1.0.10ecpe:2.3:a:dotnetnuke:dotnetnuke:1.0.10e:*:*:*:*:*:*:*
dotnetnukedotnetnuke2.1.1cpe:2.3:a:dotnetnuke:dotnetnuke:2.1.1:*:*:*:*:*:*:*
dotnetnukedotnetnuke2.1.2cpe:2.3:a:dotnetnuke:dotnetnuke:2.1.2:*:*:*:*:*:*:*
dotnetnukedotnetnuke3.0.7cpe:2.3:a:dotnetnuke:dotnetnuke:3.0.7:*:*:*:*:*:*:*
Rows per page:
1-10 of 151

CVSS2

4.6

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:H/Au:S/C:P/I:P/A:P

AI Score

6.1

Confidence

Low

EPSS

0.006

Percentile

77.7%

Related for NVD:CVE-2008-6542