Skip to content
OpenAdvisories

Archive

30 March 2009

Vulnerabilities first published on this day (UTC), newest first.

2 results · Clear filters · Feed

  • Medium —
    CVE-2008-6540 Public exploit

    DotNetNuke Default Machine Key Exposure

    DotNetNuke before 4.8.2, during installation or upgrade, does not warn the administrator when the default (1) ValidationKey and (2) DecryptionKey values cannot be modified in the web.config file, which allows remote attackers to bypass intended access restric…

  • Medium 5.3

    MoinMoin improper access control on the included page for the rst parser

    The rst parser (parser/text_rst.py) in MoinMoin 1.6.1 does not check the ACL of an included page, which allows attackers to read unauthorized include files via unknown vectors.