CVE-2015-2794

This repository contains a Python script that scans a list of websites for the presence of CVE-2015-2794, a vulnerability in DotNetNuke. The script checks if the target site responds with 'DotNetNuke Installation' when accessing a specific URL path.

This repository contains an NSE plugin for Nmap designed to scan DotNetNuke (DNN) web applications for an Administration Authentication Bypass vulnerability (CVE-2015-2794). The plugin automates the detection of the vulnerability without executing an exploit.

This is a detailed writeup describing an authentication bypass vulnerability in DotNetNuke 07.04.00, where anonymous users can access the installation wizard to create a SuperUser account. The exploit involves manipulating the installation process via URL parameters and form submissions.