CVE-2025-64095

This repository provides a detailed technical analysis of CVE-2025-64095, an unauthenticated arbitrary file upload vulnerability in DNN Platform. It includes patch diffing, root cause analysis, and a proof-of-concept curl command demonstrating the exploit.

This repository contains a functional Python script that exploits CVE-2025-64095, an unauthenticated file upload vulnerability in DotNetNuke (DNN) versions prior to 10.1.1. The PoC demonstrates the ability to upload PNG and SVG files, with the SVG payload capable of triggering XSS.

This PoC demonstrates an unauthenticated file upload vulnerability in DNN (DotNetNuke) prior to version 10.1.1, allowing an attacker to upload arbitrary files (PNG/SVG) and potentially trigger XSS via SVG payloads. The exploit tests multiple portal and storage ID combinations to bypass authentication checks.