CVE-2008-6732

CVE-2008-6732

EPSS 1.1%

Cross-site scripting (XSS) vulnerability in the Language skin object in DotNetNuke before 4.8.4 allows remote attackers to inject arbitrary web script or HTML via "newly generated paths."

Produtos afetados

Quer saber se a sua infraestrutura está exposta a isto?

Falar com a TrueHacking →

Referências

http://secunia.com/advisories/30617 https://exchange.xforce.ibmcloud.com/vulnerabilities/43030 http://www.dotnetnuke.com/News/SecurityPolicy/SecurityBulletinno20/tabid/1167/Default.aspx http://www.osvdb.org/46322 http://www.securityfocus.com/bid/29686