CVE-2008-6399

Unspecified vulnerability in DotNetNuke 4.5.2 through 4.9 allows remote attackers to "add additional roles to their user account" via unknown attack vectors.

Score

CVSS 2.0 6.4 Medium

Status

Modified - cve@mitre.org

Published

2009-03-05

Last modified

2024-09-16

Weaknesses

CWE-264

Affected products

• Dotnetnuke (Dnnsoftware)

References

• http://osvdb.org/51141
• http://secunia.com/advisories/33401
• http://www.dotnetnuke.com/News/SecurityPolicy/Securitybulletinno24/tabid/1188/Default.aspx
• http://www.securityfocus.com/bid/33109