CVE-2015-2794 | BDVDB-2026-81307 Detail

Description#

The installation wizard in DotNetNuke (DNN) before 7.4.1 allows remote attackers to reinstall the application and gain SuperUser access via a direct request to Install/InstallWizard.aspx.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www.dnnsoftware.com/community/security/security-center
https://dotnetnuke.codeplex.com/releases/view/615317
https://www.exploit-db.com/exploits/39777/
http://www.securityfocus.com/bid/96373
http://www.dnnsoftware.com/community-blog/cid/155198/workaround-for-potential-security-issue

Exploit#

https://www.exploit-db.com/exploits/39777/

History#

Version 12017-02-06Record published in the CVE List.
Version 22024-08-06Most recent update recorded in the CVE List.