← Database

CVE-2008-7102

HIGH CVSS: 7.5 Published: 2009-08-27 Modified: 2026-06-16

Description

DotNetNuke 2.0 through 4.8.4 allows remote attackers to load .ascx files instead of skin files, and possibly access privileged functionality, via unknown vectors related to parameter validation.

Affected Platforms

Dnnsoftware Dotnetnuke

Weakness Type

CWE-20

References