CVE-2008-6733

CVE-2008-6733

EPSS 1.1%

Cross-site scripting (XSS) vulnerability in the error handling page in DotNetNuke 4.6.2 through 4.8.3 allows remote attackers to inject arbitrary web script or HTML via the querystring parameter.

Affected products

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://secunia.com/advisories/30617 https://exchange.xforce.ibmcloud.com/vulnerabilities/43026 http://www.dotnetnuke.com/News/SecurityPolicy/SecurityBulletinno18/tabid/1165/Default.aspx http://www.osvdb.org/46323 http://www.securityfocus.com/bid/29686