Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Unspecified vulnerability in DotNetNuke 4.4.1 through 4.8.4 allows remote authenticated users to bypass authentication and gain privileges via unknown vectors related to a "unique id" for user actions and improper validation of a "user identity."
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
DotNetNuke 未明漏洞
Vulnerability Description
DotNetNuke 4.4.1到4.8.4版本存在未明漏洞。远程认证用户可以借助与"惟一id"相关的未知向量,绕过身份认证和获得特权。该"惟一id"用于用户操作和对"用户身份"的不合适的验证。
CVSS Information
N/A
Vulnerability Type
N/A