CVE-2008-7100

Published: Aug 27, 2009Modified: Apr 24, 2026

6.5

Vector

AV:N/AC:L/Au:S/C:P/I:P/A:P

Exploitability: 8.0 / Impact: 6.4

Source: NVD

Description

Unspecified vulnerability in DotNetNuke 4.4.1 through 4.8.4 allows remote authenticated users to bypass authentication and gain privileges via unknown vectors related to a "unique id" for user actions and improper validation of a "user identity."

Affected (13)

Products: Dnnsoftware: Dotnetnuke

Dnnsoftware

1 product

Dotnetnuke

Configuration A

13 vulnerable

Vulnerable Software	Affected Versions
Dnnsoftware Dotnetnuke	Version 4.4.1
Dnnsoftware Dotnetnuke	Version 4.5.2
Dnnsoftware Dotnetnuke	Version 4.5.4
Dnnsoftware Dotnetnuke	Version 4.5.5
Dnnsoftware Dotnetnuke	Version 4.6.0
Dnnsoftware Dotnetnuke	Version 4.6.1
Dnnsoftware Dotnetnuke	Version 4.6.2
Dnnsoftware Dotnetnuke	Version 4.7.0
Dnnsoftware Dotnetnuke	Version 4.8.0
Dnnsoftware Dotnetnuke	Version 4.8.1
Dnnsoftware Dotnetnuke	Version 4.8.2
Dnnsoftware Dotnetnuke	Version 4.8.3
Dnnsoftware Dotnetnuke	Version 4.8.4