EDB-31465
functionalDotNetNuke 4.8.1 - Default 'ValidationKey' and 'DecriptionKey' Weak Encryption
view exploit source exploit_dbverifiedtype remoteauthor Brian Holyfieldpublished 2008-03-21catalog exploit_db
01
exploited CVEs (1)
Known CVEs related to this entry.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2008-6540US | medium5.1 | Exploit | ||
DotNetNuke before 4.8.2, during installation or upgrade, does not warn the administrator when the default (1) ValidationKey and (2) DecryptionKey values cannot be modified in the w… | ||||
scry
Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.
Free scan