CVE-2008-7102: Input Validation
Published Aug 27, 2009
·Updated
DotNetNuke 2.0 through 4.8.4 allows remote attackers to load .ascx files instead of skin files, and possibly access privileged functionality, via unknown vectors related to parameter validation.
Affected Software
44 affected components
DotNetNuke DotNetNuke=2.1.1
DotNetNuke DotNetNuke=2.1.2
DotNetNuke DotNetNuke=3.0.7
DotNetNuke DotNetNuke=3.0.8
DotNetNuke DotNetNuke=3.0.11
DotNetNuke DotNetNuke=3.1.0
DotNetNuke DotNetNuke=3.3.5
DotNetNuke DotNetNuke=4.0
DotNetNuke DotNetNuke=4.3.5
DotNetNuke DotNetNuke=4.4.1
DotNetNuke DotNetNuke=4.5.2
DotNetNuke DotNetNuke=4.5.4
DotNetNuke DotNetNuke=4.5.5
DotNetNuke DotNetNuke=4.6.0
DotNetNuke DotNetNuke=4.6.1
DotNetNuke DotNetNuke=4.6.2
DotNetNuke DotNetNuke=4.7.0
DotNetNuke DotNetNuke=4.8.0
DotNetNuke DotNetNuke=4.8.1
DotNetNuke DotNetNuke=4.8.2
DotNetNuke DotNetNuke=4.8.3
DotNetNuke DotNetNuke=4.8.4
dnnsoftware Dotnetnuke=2.1.1
dnnsoftware Dotnetnuke=2.1.2
dnnsoftware Dotnetnuke=3.0.7
dnnsoftware Dotnetnuke=3.0.8
dnnsoftware Dotnetnuke=3.0.11
dnnsoftware Dotnetnuke=3.1.0
dnnsoftware Dotnetnuke=3.3.5
dnnsoftware Dotnetnuke=4.0
dnnsoftware Dotnetnuke=4.3.5
dnnsoftware Dotnetnuke=4.4.1
dnnsoftware Dotnetnuke=4.5.2
dnnsoftware Dotnetnuke=4.5.4
dnnsoftware Dotnetnuke=4.5.5
dnnsoftware Dotnetnuke=4.6.0
dnnsoftware Dotnetnuke=4.6.1
dnnsoftware Dotnetnuke=4.6.2
dnnsoftware Dotnetnuke=4.7.0
dnnsoftware Dotnetnuke=4.8.0
dnnsoftware Dotnetnuke=4.8.1
dnnsoftware Dotnetnuke=4.8.2
dnnsoftware Dotnetnuke=4.8.3
dnnsoftware Dotnetnuke=4.8.4
Remediation
Event History
Aug 27, 2009
CVE Published
via MITRE·08:00 PM
Data Sourced
via MITRE·08:00 PM
Description
Data Sourced
via NVD·08:30 PM
RemedyDescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2008-7102?
CVE-2008-7102 has a medium severity due to its potential for allowing remote attackers to access sensitive functionality.
2
How do I fix CVE-2008-7102?
To fix CVE-2008-7102, update your DotNetNuke installation to version 4.9.0 or later which addresses this vulnerability.
3
What are the affected versions for CVE-2008-7102?
CVE-2008-7102 affects DotNetNuke versions from 2.0 up to and including 4.8.4.
4
What type of vulnerability is CVE-2008-7102?
CVE-2008-7102 is classified as a vulnerability that allows remote file inclusion due to improper parameter validation.
5
Can I still use DotNetNuke versions affected by CVE-2008-7102?
Using affected versions of DotNetNuke is not recommended as they are vulnerable to potential exploitation.