CVE-2015-2794

The installation wizard in DotNetNuke (DNN) before 7.4.1 allows remote attackers to reinstall the application and gain SuperUser access via a direct request to Install/InstallWizard.aspx.

• CWE-264

• http://www.dnnsoftware.com/community-blog/cid/155198/workaround-for-potential-security-issueMitigation, Vendor Advisory
• http://www.dnnsoftware.com/community/security/security-centerPatch, Vendor Advisory
• http://www.securityfocus.com/bid/96373
• https://dotnetnuke.codeplex.com/releases/view/615317Release Notes, Vendor Advisory
• https://www.exploit-db.com/exploits/39777/Exploit, Third Party Advisory, VDB Entry
• http://www.dnnsoftware.com/community-blog/cid/155198/workaround-for-potential-security-issueMitigation, Vendor Advisory
• http://www.dnnsoftware.com/community/security/security-centerPatch, Vendor Advisory
• http://www.securityfocus.com/bid/96373
• https://dotnetnuke.codeplex.com/releases/view/615317Release Notes, Vendor Advisory
• https://www.exploit-db.com/exploits/39777/Exploit, Third Party Advisory, VDB Entry

Published

Feb 6, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2015-2788Multiple stack-based buffer overflows in the ib_fill_isqlda …
• CVE-2015-2789Unquoted Windows search path vulnerability in the Foxit Clou…
• CVE-2015-2790Foxit Reader, Enterprise Reader, and PhantomPDF before 7.1 a…
• CVE-2015-2791The "menu sync" function in the WPML plugin before 3.1.9 for…
• CVE-2015-2792The WPML plugin before 3.1.9 for WordPress does not properly…
• CVE-2015-2793Cross-site scripting (XSS) vulnerability in templates/openid…6.1
• CVE-2015-2796Multiple cross-site scripting (XSS) vulnerabilities in Proje…
• CVE-2015-2797Stack-based buffer overflow in AirTies Air 6372, 5760, 5750,…
• CVE-2015-2798SQL injection vulnerability in Joomla! Component Contact For…
• CVE-2015-2800The user authentication module in Huawei Campus switches S57…
• CVE-2015-2802An Information Disclosure vulnerability exists in HP SiteSco…7.5
• CVE-2015-2803SQL injection vulnerability in mod1/index.php in the Akronym…