Web application abuses : DotNetNuke < 5.0 Multiple Vulnerabilities

Vulnerability Search		Search 324607 CVE descriptions and 145615 test descriptions, access 10,000+ cross references.
	Tests CVE All

Test ID: 1.3.6.1.4.1.25623.1.0.802306

Category: Web application abuses

Title: DotNetNuke < 5.0 Multiple Vulnerabilities

Summary: DotNetNuke is prone to multiple vulnerabilities.

Description: Summary:
DotNetNuke is prone to multiple vulnerabilities.

Vulnerability Insight:
Multiple flaws are present in DotNetNuke. The application fails
to revalidate file and folder permissions correctly for uploads. This allows remote file upload
and unauthorized access to the server, files and database.

Vulnerability Impact:
Successful exploitation will allow attacker to gain unauthorized
access to the server.

Affected Software/OS:
DotNetNuke version prior to 5.x.

Solution:
Update to version 5.0 or later.

CVSS Score:
7.5

CVSS Vector:
AV:N/AC:L/Au:N/C:P/I:P/A:P

Copyright Copyright (C) 2011 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit.
To run a free test of this vulnerability against your system, register below.

Test ID:	1.3.6.1.4.1.25623.1.0.802306
Category:	Web application abuses
Title:	DotNetNuke < 5.0 Multiple Vulnerabilities
Summary:	DotNetNuke is prone to multiple vulnerabilities.
Description:	Summary: DotNetNuke is prone to multiple vulnerabilities. Vulnerability Insight: Multiple flaws are present in DotNetNuke. The application fails to revalidate file and folder permissions correctly for uploads. This allows remote file upload and unauthorized access to the server, files and database. Vulnerability Impact: Successful exploitation will allow attacker to gain unauthorized access to the server. Affected Software/OS: DotNetNuke version prior to 5.x. Solution: Update to version 5.0 or later. CVSS Score: 7.5 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Copyright	Copyright (C) 2011 Greenbone AG