CVEvulnerability

CVE-2008-6541

6.8 MEDIUM Published 2009-03-30 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2009-03-30
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
6.8 MEDIUM — AV:N/AC:M/Au:N/C:P/I:P/A:P
Weaknesses
CWE-20

Description

Unrestricted file upload vulnerability in the file manager module in DotNetNuke before 4.8.2 allows remote administrators to upload arbitrary files and gain privileges to the server via unspecified vectors.

Affected configurations

• dnnsoftware dotnetnuke (<= 4.8.1) • dnnsoftware dotnetnuke 1.0.6 • dnnsoftware dotnetnuke 1.0.7 • dnnsoftware dotnetnuke 1.0.8 • dnnsoftware dotnetnuke 1.0.9 • dnnsoftware dotnetnuke 1.0.10d • dnnsoftware dotnetnuke 1.0.10e • dnnsoftware dotnetnuke 2.1.1 • dnnsoftware dotnetnuke 2.1.2 • dnnsoftware dotnetnuke 3.0.7 • dnnsoftware dotnetnuke 3.0.8 • dnnsoftware dotnetnuke 3.0.11 • dnnsoftware dotnetnuke 3.1.0 • dnnsoftware dotnetnuke 3.3.5 • dnnsoftware dotnetnuke 4.0 • dnnsoftware dotnetnuke 4.3.5 • dnnsoftware dotnetnuke 4.5.2

Related

Weakness · CWE (1)

  • CWE-20 Improper Input Validation weakness

References