CVE-2008-6542

Unspecified vulnerability in the Skin Manager in DotNetNuke before 4.8.2 allows remote authenticated administrators to perform "server-side execution of application logic" by uploading a static file that is converted into a dynamic script via unknown vectors related to HTM or HTML files.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
4.6 UNKNOWN
NETWORK
HIGH
AV:N/AC:H/Au:S/C:P/I:P/A:P
Base Score
CVSS 3.x
EPSS Score
Percentile: 80%
Affected Products (NVD)
VendorProductVersion
dnnsoftwaredotnetnuke
𝑥
≤ 4.8.1
dnnsoftwaredotnetnuke
1.0.6
dnnsoftwaredotnetnuke
1.0.7
dnnsoftwaredotnetnuke
1.0.8
dnnsoftwaredotnetnuke
1.0.9
dnnsoftwaredotnetnuke
1.0.10d:d
dnnsoftwaredotnetnuke
1.0.10e:e
dnnsoftwaredotnetnuke
2.1.1
dnnsoftwaredotnetnuke
2.1.2
dnnsoftwaredotnetnuke
3.0.7
dnnsoftwaredotnetnuke
3.0.8
dnnsoftwaredotnetnuke
3.0.11
dnnsoftwaredotnetnuke
3.1.0
dnnsoftwaredotnetnuke
4.0
dnnsoftwaredotnetnuke
4.5.2
𝑥
= Vulnerable software versions
References
http://osvdb.org/43721
http://secunia.com/advisories/29488
http://www.dotnetnuke.com/News/SecurityBulletins/SecurityBulletinno13/tabid/1149/Default.aspx
http://www.securityfocus.com/bid/28438
https://exchange.xforce.ibmcloud.com/vulnerabilities/49767
http://osvdb.org/43721
http://secunia.com/advisories/29488
http://www.dotnetnuke.com/News/SecurityBulletins/SecurityBulletinno13/tabid/1149/Default.aspx
http://www.securityfocus.com/bid/28438
https://exchange.xforce.ibmcloud.com/vulnerabilities/49767