CVE-2015-2794

Critical

Published: 06/02/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

The installation wizard in DotNetNuke (DNN) before version 7.4.1 allows remote attackers to reinstall the application and gain SuperUser access via a direct request to Install/InstallWizard.aspx.

Risk Assessment

Attackers can gain full system privileges, posing a serious threat to data security and application integrity.

Recommendation

It is recommended to update DotNetNuke to version 7.4.1 or later to mitigate this vulnerability.

Original NVD description (English source)

The installation wizard in DotNetNuke (DNN) before 7.4.1 allows remote attackers to reinstall the application and gain SuperUser access via a direct request to Install/InstallWizard.aspx.