Archive for the 'Privilege Escalation' Category

DotNetNuke Multiple Vulnerabilities

Application: DotNetNuke
Affected Version: version prior to 4.8.2.
Vendor’s URL: http://www.dotnetnuke.com/
Bug Type: Privilege escalation, access bypass
Risk Level: Critical

Solution:
Update to version 4.8.2.
http://www.dotnetnuke.com/tabid/125/default.aspx

YaBB CRLF Injection Privilege Escalation

Application: YABB Forum
Affected Version: 2.1 or other versions may be affected
Vendor’s URL: http://www.yabbforum.com/
Bug Type: Privilege Escalation
Risk Level: Critical

Solution:
Apply patch.
http://www.yabbforum.com/community/?board=general;action=display;num=1181678785