CVE-2015-2794 in DotNetNuke
Summary
The installation wizard in DotNetNuke (DNN) before 7.4.1 allows remote attackers to reinstall the application and gain SuperUser access via a direct request to Install/InstallWizard.aspx.
Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.
Reservation
03/30/2015
Disclosure
02/06/2017
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 96550 | DotNetNuke Installation Wizard InstallWizard.aspx access control | 264 | Proof-of-Concept | Official fix | CVE-2015-2794 |