CVE-2008-6542

Severity: medium (CVSS 4.6 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.6% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2009-03-30 · updated 2026-06-16

Description

Unspecified vulnerability in the Skin Manager in DotNetNuke before 4.8.2 allows remote authenticated administrators to perform "server-side execution of application logic" by uploading a static file that is converted into a dynamic script via unknown vectors related to HTM or HTML files.

Affected products

DotNetNuke CMS Fixed in 9.1.1: through 4.8.1; 1.0.6, 1.0.7, 1.0.8, 1.0.9, 1.0.10d, 1.0.10e (+8)

References

http://osvdb.org/43721
http://secunia.com/advisories/29488
http://www.dotnetnuke.com/News/SecurityBulletins/SecurityBulletinno13/tabid/1149/Default.aspx
http://www.securityfocus.com/bid/28438
https://exchange.xforce.ibmcloud.com/vulnerabilities/49767
http://osvdb.org/43721
http://secunia.com/advisories/29488
http://www.dotnetnuke.com/News/SecurityBulletins/SecurityBulletinno13/tabid/1149/Default.aspx
http://www.securityfocus.com/bid/28438
https://exchange.xforce.ibmcloud.com/vulnerabilities/49767

Get alerted when CVE-2008-6542 or the next vulnerability affects your stack