Show filters
13 Total Results
Displaying 11-13 of 13
Sort by:
Attacker Value
Unknown
CVE-2008-6732
Disclosure Date: April 21, 2009 (last updated October 04, 2023)
Cross-site scripting (XSS) vulnerability in the Language skin object in DotNetNuke before 4.8.4 allows remote attackers to inject arbitrary web script or HTML via "newly generated paths."
0
Attacker Value
Unknown
CVE-2008-6644
Disclosure Date: April 07, 2009 (last updated October 04, 2023)
Cross-site scripting (XSS) vulnerability in Default.aspx in DotNetNuke 4.8.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO.
0
Attacker Value
Unknown
CVE-2008-6399
Disclosure Date: March 05, 2009 (last updated October 04, 2023)
Unspecified vulnerability in DotNetNuke 4.5.2 through 4.9 allows remote attackers to "add additional roles to their user account" via unknown attack vectors.
0
