CVE-2008-6733

Cross-site scripting (XSS) vulnerability in the error handling page in DotNetNuke 4.6.2 through 4.8.3 allows remote attackers to inject arbitrary web script or HTML via the querystring parameter.

Link	Resource
http://www.dotnetnuke.com/News/SecurityPolicy/SecurityBulletinno18/tabid/1165/Default.aspx	Vendor Advisory
http://www.osvdb.org/46323
http://secunia.com/advisories/30617	Vendor Advisory
http://www.securityfocus.com/bid/29686
https://exchange.xforce.ibmcloud.com/vulnerabilities/43026

Configuration 1

cpe:2.3:a:dotnetnuke:dotnetnuke:4.8.2:*:*:*:*:*:*:* cpe:2.3:a:dotnetnuke:dotnetnuke:4.8.1:*:*:*:*:*:*:* cpe:2.3:a:dotnetnuke:dotnetnuke:4.8.3:*:*:*:*:*:*:* cpe:2.3:a:dotnetnuke:dotnetnuke:4.6.2:*:*:*:*:*:*:*

---

Published : 2009-04-21 06:30

Updated : 2017-08-17 01:29

---

NVD link : CVE-2008-6733

Mitre link : CVE-2008-6733

Dotnetnuke

CWE-79