CVE-2009-4109

The install wizard in DotNetNuke 4.0 through 5.1.4 does not prevent anonymous users from accessing functionality related to determination of the need for an…

published November 28, 2009

CVSS
—
EPSS
1%
Percentile
68.4
In the wild
Unconfirmed
What it is

The install wizard in DotNetNuke 4.0 through 5.1.4 does not prevent anonymous users from accessing functionality related to determination of the need for an upgrade, which allows remote attackers to access version information and possibly other sensitive information.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01218 · 68.4th percentile
Published
2009-11-28T11:00Z
EPSS history
Timeline
  • 28 NOV 11:00Z
    The install wizard in DotNetNuke 4.0 through 5.1.4 does not prevent anonymous users from accessing functionality related to determination of the need for an…
    cvelistv5