CVE-2015-2794

Published Feb 6, 2017·Updated Jun 16, 2026

NVD Description

The installation wizard in DotNetNuke (DNN) before 7.4.1 allows remote attackers to reinstall the application and gain SuperUser access via a direct request to Install/InstallWizard.aspx.

Public Exploits & PoCs2 found

PoC: CVE-2015-2794-finder

CVE-2015-2794 auto finder

PoC: DNN_CVE-2015-2794

NSE plugin for Nmap that scans a DotNetNuke (DNN) web application for an Administration Authentication Bypass vulnerability (CVE-2015-2794, EDB-ID: 39777).

CVSS Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References

View on NVD Search GitHub Search Google

Get alerted for CVEs like this

Start monitoring free