← Database

CVE-2008-7100

MEDIUM CVSS: 6.5 Published: 2009-08-27 Modified: 2026-06-16

Description

Unspecified vulnerability in DotNetNuke 4.4.1 through 4.8.4 allows remote authenticated users to bypass authentication and gain privileges via unknown vectors related to a "unique id" for user actions and improper validation of a "user identity."

Affected Platforms

Dnnsoftware Dotnetnuke

Weakness Type

NVD-CWE-noinfo

References