DotNetNuke is prone to multiple security-bypass vulnerabilities.
Credit:
The original article can be found at: http://www.securityfocus.com/bid/48584
The information has been provided by Robb Bryn, Simon Meraner and Laurence Neville .
Vulnerable Systems:
* DotNetNuke DotNetNuke 5.6 and prior
Successfully exploiting these issues will allow attackers to bypass security restrictions and perform unauthorized actions.
Versions prior to DotNetNuke 5.6.3 are vulnerable.
Vendor Status:
Currently we are not aware of any vendor-supplied patches
