CVE-2008-6399: Dnnsoftware DotNetNuke

Medium severity, CVSS 6.4. EPSS: 1.9% chance of exploitation in the next 30 days.

Unspecified vulnerability in DotNetNuke 4.5.2 through 4.9 allows remote attackers to "add additional roles to their user account" via unknown attack vectors.

Affected products

• Dnnsoftware DotNetNuke: version 4.5.2 only; version 4.8.1 only; version 4.8.2 only; version 4.8.3 only; version 4.8.4 only; version 4.9 only

Published 2009-03-05. Last modified 2026-06-16.