UpHeron
All vulnerabilities

Servers and applications

CVE-2008-6542

Unspecified vulnerability in the Skin Manager in DotNetNuke before 4.8.2 allows remote authenticated administrators to perform "server-side execution of application logic" by uploading a static file that is converted into a dynamic script via unknown vectors related to HTM or HTML files.

Severity
Medium 4.6
Published
30 Mar 2009
Last changed
16 Jun 2026
Added to UpHeron
1 Nov 2026
Exploit chance
1.6% in the next 30 daysHigher than 76% of CVEs. EPSS by FIRST, 12 Nov 2026
Attack
Over the network · Only under certain conditions · Needs a login
Attacker can
Read some data · Change some data · Slow it down
CVSS vector
AV:N/AC:H/Au:S/C:P/I:P/A:P
Sources
NVD

Affected software

SoftwareAffected versions
DNN PlatformServers and applications · cpe:a:dnnsoftware:dotnetnuke
  • Version 4.5.2
  • Version 4.0
  • Version 3.1.0
  • Version 3.0.11
All 15 release lines
  • Every version up to 4.8.1
  • Version 1.0.6
  • Version 1.0.7
  • Version 1.0.8
  • Version 1.0.9
  • Version 1.0.10d
  • Version 1.0.10e
  • Version 2.1.1
  • Version 2.1.2
  • Version 3.0.7
  • Version 3.0.8
  • Version 3.0.11
  • Version 3.1.0
  • Version 4.0
  • Version 4.5.2

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2008-6542
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2008-6542