Skip to content
OpenAdvisories

Archive

6 February 2017

Vulnerabilities first published on this day (UTC), newest first.

1 result · Clear filters · Feed

  • Critical 9.8
    CVE-2015-2794 Public exploit EPSS 75%

    The installation wizard in DotNetNuke (DNN) allows privilege escalation

    The installation wizard in DotNetNuke (DNN) before 7.4.1 allows remote attackers to reinstall the application and gain SuperUser access via a direct request to Install/InstallWizard.aspx.