Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Unspecified vulnerability in the Skin Manager in DotNetNuke before 4.8.2 allows remote authenticated administrators to perform "server-side execution of application logic" by uploading a static file that is converted into a dynamic script via unknown vectors related to HTM or HTML files.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
DotNetNuke 皮肤管理器远程漏洞
Vulnerability Description
DotNetNuke 4.8.2之前版本中的皮肤管理器存在未明漏洞。远程认证管理员可以通过上传一个静态文件,实现"服务器端对应用程序逻辑的执行"。攻击者可以借助与HTM或HTML文件相关的未知向量,将该静态文件转换到一个动态脚本中。
CVSS Information
N/A
Vulnerability Type
N/A