{"id":"CVE-2015-2794","published":"2017-02-06T15:00:00Z","modified":"2024-08-06T05:24:38Z","title":"The installation wizard in DotNetNuke (DNN) before 7.4.1 allows remote attackers to reinstall the application and gain…","vendor":null,"product":null,"tier":"core","eol":null,"description":{"text":"The installation wizard in DotNetNuke (DNN) before 7.4.1 allows remote attackers to reinstall the application and gain SuperUser access via a direct request to Install/InstallWizard.aspx.","provenance":"source","from":"CVE.org"},"summary":{"text":"The installation wizard in DotNetNuke (DNN) before 7.4.1 contains a flaw that lets the application be reinstalled and grants SuperUser access.","provenance":"ai","model":"claude-haiku-5-5","generatedAt":"2026-10-29T07:19:21Z"},"cvss":null,"epss":{"score":0.75119,"percentile":0.99508,"date":"2026-10-28","provenance":"source"},"kev":null,"vulncheckKev":null,"exploited":false,"otx":{"pulseCount":0,"pulses":[],"provenance":"machine"},"cwes":[],"references":[{"url":"http://www.dnnsoftware.com/community/security/security-center","tags":["x_refsource_CONFIRM"]},{"url":"https://dotnetnuke.codeplex.com/releases/view/615317","tags":["x_refsource_CONFIRM"]},{"url":"https://www.exploit-db.com/exploits/39777/","tags":["exploit","x_refsource_EXPLOIT-DB"]},{"url":"http://www.securityfocus.com/bid/96373","tags":["vdb-entry","x_refsource_BID"]},{"url":"http://www.dnnsoftware.com/community-blog/cid/155198/workaround-for-potential-security-issue","tags":["x_refsource_CONFIRM"]}],"techniques":[],"reports":[],"affected":[{"ecosystem":"NuGet","package":"DotNetNuke.Core","vulnerableRanges":["<7.4.1"],"patched":["7.4.1"],"from":["GHSA-x8f7-h444-97w4"],"provenance":"source"}],"advisories":[{"id":"GHSA-x8f7-h444-97w4","url":"https://github.com/advisories/GHSA-x8f7-h444-97w4","severity":"CRITICAL","ecosystem":"NuGet","package":"DotNetNuke.Core","vulnerableRanges":["<7.4.1"],"patched":["7.4.1"],"provenance":"source","from":"GHSA"}],"euvd":{"id":"EUVD-2018-0713","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2018-0713","exploited":false,"exploitedSince":null,"provenance":"source"},"exploits":[{"id":39777,"url":"https://www.exploit-db.com/exploits/39777","title":"DotNetNuke 07.04.00 - Administration Authentication Bypass","type":"webapps","platform":"asp","date":"2016-05-06","verified":true,"provenance":"source"}],"exploitSources":{"exploitdb":{"count":1,"earliest":"2016-05-06"},"pocGithub":{"count":2,"skipped":0,"earliest":"2016-05-07","earliestUrl":"https://github.com/styx00/DNN_CVE-2015-2794","repos":[{"name":"styx00/DNN_CVE-2015-2794","url":"https://github.com/styx00/DNN_CVE-2015-2794","stars":0,"created":"2016-05-07"},{"name":"wilsc0w/CVE-2015-2794-finder","url":"https://github.com/wilsc0w/CVE-2015-2794-finder","stars":0,"created":"2019-01-20"}]},"nuclei":[{"id":"CVE-2015-2794","name":"DotNetNuke 07.04.00 - Administration Authentication Bypass","severity":"critical","path":"http/cves/2015/CVE-2015-2794.yaml","url":"https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2015/CVE-2015-2794.yaml"}],"first":{"date":"2016-05-06","source":"Exploit-DB","url":"https://www.exploit-db.com/exploits/39777"},"provenance":"source"},"exploitRefs":["https://www.exploit-db.com/exploits/39777/","https://www.exploit-db.com/exploits/39777"],"flow":[],"timeline":[{"date":"2016-05-06","kind":"exploit-public","label":"First public exploit: Exploit-DB (EDB-39777); later: PoC-in-GitHub 2016-05-07","url":"https://www.exploit-db.com/exploits/39777","provenance":"source"},{"date":"2017-02-06","kind":"published","label":"Published (CVE.org)","url":"https://www.cve.org/CVERecord?id=CVE-2015-2794","provenance":"source"}],"speed":{"daysToPublicExploit":null,"firstExploitFrom":"Exploit-DB","daysToKev":null},"priority":{"score":24.9,"factors":[{"name":"In a KEV catalog","points":0.0,"detail":"not listed"},{"name":"Recent KEV listing","points":0.0,"detail":"not listed"},{"name":"Known ransomware use","points":0.0,"detail":"not known"},{"name":"EPSS percentile","points":19.9,"detail":"percentile 0.9951"},{"name":"Named in threat reports","points":0.0,"detail":"0 reports"},{"name":"Public exploit code","points":5.0,"detail":"1 NVD reference tagged Exploit; 1 Exploit-DB entry; 1 advisory exploit reference; 2 PoC-in-GitHub repos; 1 nuclei template"},{"name":"Mentioned in OTX pulses","points":0.0,"detail":"0 pulses"},{"name":"CVSS severity","points":0.0,"detail":"no CVSS"},{"name":"End-of-life product","points":0.0,"detail":"supported or unknown"}]},"lineage":{"packageHistory":[{"cve":"CVE-2013-4649","published":"2014-03-12","fixed":"7.1.1","kev":false},{"cve":"CVE-2013-7335","published":"2014-03-12","fixed":"7.1.1","kev":false},{"cve":"CVE-2015-1566","published":"2015-02-09","fixed":"7.4.0","kev":false,"link":{"from":"CVE-2015-1566","to":"CVE-2015-2794","relation":"successor","confidence":"low","kind":"sequence","evidence":[{"kind":"version-step","provenance":"source","package":"NuGet:DotNetNuke.Core","fromFixed":"7.4.0","toFixed":"7.4.1","daysApart":728}]}},{"cve":"CVE-2015-2794","published":"2017-02-06","fixed":"7.4.1","kev":false},{"cve":"CVE-2016-7119","published":"2016-08-31","fixed":"8.0.1","kev":false},{"cve":"CVE-2017-9822","published":"2017-07-20","fixed":"9.1.1","kev":true},{"cve":"CVE-2017-0929","published":"2018-07-03","fixed":"9.2.0","kev":false}],"package":"NuGet:DotNetNuke.Core"}}