CVE

Id
36849  
CVE No.
CVE-2008-6732  
Status
Candidate  
Description
Cross-site scripting (XSS) vulnerability in the Language skin object in DotNetNuke before 4.8.4 allows remote attackers to inject arbitrary web script or HTML via "newly generated paths."  
Phase
Assigned (20090421)  
Votes
None (candidate not yet proposed)  
Comments