CVE-2008-6733

CVE-2008-6733

EPSS 1.1%

Cross-site scripting (XSS) vulnerability in the error handling page in DotNetNuke 4.6.2 through 4.8.3 allows remote attackers to inject arbitrary web script or HTML via the querystring parameter.

Produtos afetados

Quer saber se a sua infraestrutura está exposta a isto?

Falar com a TrueHacking →

Referências

http://secunia.com/advisories/30617 https://exchange.xforce.ibmcloud.com/vulnerabilities/43026 http://www.dotnetnuke.com/News/SecurityPolicy/SecurityBulletinno18/tabid/1165/Default.aspx http://www.osvdb.org/46323 http://www.securityfocus.com/bid/29686