The installation wizard in DotNetNuke (DNN) allows privilege escalation

Description

References

• nvd.nist.gov/vuln/detail/CVE-2015-2794 · ADVISORY
• dotnetnuke.codeplex.com/releases/view/615317 · WEB
• GitHub Advisory GHSA-x8f7-h444-97w4 · ADVISORY
• exploit-db.com/exploits/39777 · WEB
• dnnsoftware.com/community-blog/cid/155198/workaround-for-potential-security-issue · WEB
• dnnsoftware.com/community/security/security-center · WEB
• securityfocus.com/bid/96373 · WEB
• exploit-db.com/exploits/39777 · Exploit

Mais vulnerabilidades de DotNetNuke.Core

• CVE-2026-40321ALTO 8.0DNN (formerly DotNetNuke) is an open-source web content management platform (CMS) in the Microsoft ecosystem. Prior to version 10.2.2, a use…
• CVE-2026-40306MÉDIO 6.5DNN (formerly DotNetNuke) is an open-source web content management platform (CMS) in the Microsoft ecosystem. All new installations of DNN 1…
• CVE-2026-40305MÉDIO 4.3DNN (formerly DotNetNuke) is an open-source web content management platform (CMS) in the Microsoft ecosystem. Starting in version 6.0.0 and …
• GHSA-fcpv-w245-r2q7BAIXODotNetNuke.Core security code analysis rules triggered
• CVE-2026-24838MÉDIO 5.4DNN (formerly DotNetNuke) is an open-source web content management platform (CMS) in the Microsoft ecosystem. Prior to versions 9.13.10 and …