wilsc0w

1 exploit Active since Feb 2017
CVE-2015-2794 NOMISEC CRITICAL SCANNER
DotNetNuke < 7.4.1 - Unauthenticated Application Reinstallation and Privilege Escalation via Install Wizard
The installation wizard in DotNetNuke (DNN) before 7.4.1 allows remote attackers to reinstall the application and gain SuperUser access via a direct request to Install/InstallWizard.aspx.
CVSS 9.8