CVE-2008-7102: Dnnsoftware DotNetNuke

High severity, CVSS 7.5. EPSS: 1.4% chance of exploitation in the next 30 days.

DotNetNuke 2.0 through 4.8.4 allows remote attackers to load .ascx files instead of skin files, and possibly access privileged functionality, via unknown vectors related to parameter validation.

Affected products

• Dnnsoftware DotNetNuke: version 2.1.1 only; version 2.1.2 only; version 3.0.7 only; version 3.0.8 only; version 3.0.11 only; version 3.1.0 only; …

Published 2009-08-27. Last modified 2026-06-16.