CVE-2008-7102

DotNetNuke 2.0 through 4.8.4 allows remote attackers to load .ascx files instead of skin files, and possibly access privileged functionality, via unknown vectors related to parameter validation.

Link	Resource
http://www.securityfocus.com/bid/31145
http://secunia.com/advisories/31893	Vendor Advisory
http://osvdb.org/48345
http://www.dotnetnuke.com/News/SecurityPolicy/Securitybulletinno23/tabid/1176/Default.aspx	Patch Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/45077

Configuration 1

cpe:2.3:a:dotnetnuke:dotnetnuke:4.8.2:*:*:*:*:*:*:* cpe:2.3:a:dotnetnuke:dotnetnuke:4.8.1:*:*:*:*:*:*:* cpe:2.3:a:dotnetnuke:dotnetnuke:2.1.1:*:*:*:*:*:*:* cpe:2.3:a:dotnetnuke:dotnetnuke:4.8.3:*:*:*:*:*:*:* cpe:2.3:a:dotnetnuke:dotnetnuke:4.5.2:*:*:*:*:*:*:* cpe:2.3:a:dotnetnuke:dotnetnuke:4.6.2:*:*:*:*:*:*:* cpe:2.3:a:dotnetnuke:dotnetnuke:4.8.4:*:*:*:*:*:*:* cpe:2.3:a:dotnetnuke:dotnetnuke:3.0.8:*:*:*:*:*:*:* cpe:2.3:a:dotnetnuke:dotnetnuke:4.3.5:*:*:*:*:*:*:* cpe:2.3:a:dotnetnuke:dotnetnuke:4.5.4:*:*:*:*:*:*:* cpe:2.3:a:dotnetnuke:dotnetnuke:2.1.2:*:*:*:*:*:*:* cpe:2.3:a:dotnetnuke:dotnetnuke:4.0:*:*:*:*:*:*:* cpe:2.3:a:dotnetnuke:dotnetnuke:4.4.1:*:*:*:*:*:*:* cpe:2.3:a:dotnetnuke:dotnetnuke:3.0.11:*:*:*:*:*:*:* cpe:2.3:a:dotnetnuke:dotnetnuke:3.0.7:*:*:*:*:*:*:* cpe:2.3:a:dotnetnuke:dotnetnuke:4.6.0:*:*:*:*:*:*:* cpe:2.3:a:dotnetnuke:dotnetnuke:4.7.0:*:*:*:*:*:*:* cpe:2.3:a:dotnetnuke:dotnetnuke:4.8.0:*:*:*:*:*:*:* cpe:2.3:a:dotnetnuke:dotnetnuke:4.5.5:*:*:*:*:*:*:* cpe:2.3:a:dotnetnuke:dotnetnuke:3.3.5:*:*:*:*:*:*:* cpe:2.3:a:dotnetnuke:dotnetnuke:3.1.0:*:*:*:*:*:*:* cpe:2.3:a:dotnetnuke:dotnetnuke:4.6.1:*:*:*:*:*:*:*

---

Published : 2009-08-27 08:30

Updated : 2017-08-17 01:29

---

NVD link : CVE-2008-7102

Mitre link : CVE-2008-7102

Dotnetnuke

CWE-20