The forDNN.UsersExportImport module prior to 1.2.0 for DNN (formerly DotNetNuke) allows an unprivileged user to import (create) new users with Administrator privileges, as demonstrated by Roles="Administrators" in XML or CSV data.
Vulnerable Product | Search on Vulmon | Subscribe to Product |
---|---|---|
fordnn usersexportimport |