CVE-2019-19392

The forDNN.UsersExportImport module before 1.2.0 for DNN formerly DotNetNuke allows an unprivileged user to import create new users with Administrator privileges, as demonstrated by Roles="Administrators" in XML or CSV data...

CVE-2019-19392: Incorrect Default Permissions

The forDNN.UsersExportImport module before 1.2.0 for DNN formerly DotNetNuke allows an unprivileged user to import create new users with Administrator privileges, as demonstrated by Roles="Administrators" in XML or CSV data...

PT-2020-10153

Name of the Vulnerable Software and Affected Versions DNN formerly DotNetNuke forDNN.UsersExportImport module versions prior to 1.2.0 Description The issue allows an unprivileged user to import new users with Administrator privileges by including specific roles in XML or CSV data, such as...