CVE-2008-7100

Description

Unspecified vulnerability in DotNetNuke 4.4.1 through 4.8.4 allows remote authenticated users to bypass authentication and gain privileges via unknown vectors related to a "unique id" for user actions and improper validation of a "user identity."

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/45081

http://www.securityfocus.com/bid/31145

http://www.dotnetnuke.com/News/SecurityPolicy/Securitybulletinno21/tabid/1174/Default.aspx

http://secunia.com/advisories/31893

http://osvdb.org/48343

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

EPSS