CVE-2008-7100
27.08.2009, 20:30
Unspecified vulnerability in DotNetNuke 4.4.1 through 4.8.4 allows remote authenticated users to bypass authentication and gain privileges via unknown vectors related to a "unique id" for user actions and improper validation of a "user identity."Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| dnnsoftware | dotnetnuke | 4.4.1 |
| dnnsoftware | dotnetnuke | 4.5.2 |
| dnnsoftware | dotnetnuke | 4.5.4 |
| dnnsoftware | dotnetnuke | 4.5.5 |
| dnnsoftware | dotnetnuke | 4.6.0 |
| dnnsoftware | dotnetnuke | 4.6.1 |
| dnnsoftware | dotnetnuke | 4.6.2 |
| dnnsoftware | dotnetnuke | 4.7.0 |
| dnnsoftware | dotnetnuke | 4.8.0 |
| dnnsoftware | dotnetnuke | 4.8.1 |
| dnnsoftware | dotnetnuke | 4.8.2 |
| dnnsoftware | dotnetnuke | 4.8.3 |
| dnnsoftware | dotnetnuke | 4.8.4 |
𝑥
= Vulnerable software versions
References