What’s Vulnerable › Vulnerabilities

CVE-2008-6541

• Severity: medium (CVSS 6.8 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.0% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2009-03-30 · updated 2026-06-16
• Weakness: CWE-20

Description

Unrestricted file upload vulnerability in the file manager module in DotNetNuke before 4.8.2 allows remote administrators to upload arbitrary files and gain privileges to the server via unspecified vectors.

Affected products

• DotNetNuke CMS Fixed in 9.1.1: through 4.8.1; 1.0.6, 1.0.7, 1.0.8, 1.0.9, 1.0.10d, 1.0.10e (+10)

References

• http://osvdb.org/43719
• http://secunia.com/advisories/29488
• http://www.dotnetnuke.com/News/SecurityBulletins/SecurityBulletinno11/tabid/1147/Default.aspx
• http://www.securityfocus.com/bid/28438
• http://osvdb.org/43719
• http://secunia.com/advisories/29488
• http://www.dotnetnuke.com/News/SecurityBulletins/SecurityBulletinno11/tabid/1147/Default.aspx
• http://www.securityfocus.com/bid/28438

Get alerted when CVE-2008-6541 or the next vulnerability affects your stack