VULNERABILITY INTELLIGENCE

CVE-2008-7100

CVSS score6.5 MEDIUM
EPSS probability1.21%
CISA KEVNot currently listed
Published2009-08-27
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:S/C:P/I:P/A:P

Description

Unspecified vulnerability in DotNetNuke 4.4.1 through 4.8.4 allows remote authenticated users to bypass authentication and gain privileges via unknown vectors related to a "unique id" for user actions and improper validation of a "user identity."

Primary references