CVE-2019-19392

The forDNN.UsersExportImport module before 1.2.0 for DNN formerly DotNetNuke allows an unprivileged user to import create new users with Administrator privileges, as demonstrated by Roles="Administrators" in XML or CSV data...

Design/Logic Flaw

The forDNN.UsersExportImport module before 1.2.0 for DNN formerly DotNetNuke allows an unprivileged user to import create new users with Administrator privileges, as demonstrated by Roles="Administrators" in XML or CSV data...

CVE-2019-19392

The CVE-2019-19392 issue affects the forDNN.UsersExportImport module for DNN (DotNetNuke) prior to version 1.2.0. An unprivileged user can import (create) new users with Administrator privileges by supplying Roles="Administrators" in XML or CSV data, enabling elevation of privilege. The connected...