Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

gplhost domain technologie control 0.28.4 vulnerabilities and exploits

(subscribe to this query)
6.5
CVSSv2
CVE-2011-5272
SQL injection vulnerability in Domain Technologie Control (DTC) prior to 0.34.1 allows remote authenticated users to execute arbitrary SQL commands via the vps_note parameter to dtcadmin/logPushlet.php. NOTE: this issue was originally part of CVE-2011-3197, but that ID was SPLIT ...
Gplhost Domain Technologie Control 0.29.8Gplhost Domain Technologie Control 0.28.9Gplhost Domain Technologie Control 0.32.1Gplhost Domain Technologie Control 0.25.3Gplhost Domain Technologie Control 0.30.6Gplhost Domain Technologie Control 0.26.9Gplhost Domain Technologie Control 0.29.1Gplhost Domain Technologie Control 0.27.3Gplhost Domain Technologie Control 0.28.4Gplhost Domain Technologie ControlGplhost Domain Technologie Control 0.32.3Gplhost Domain Technologie Control 0.28.10Gplhost Domain Technologie Control 0.25.1Gplhost Domain Technologie Control 0.30.18Gplhost Domain Technologie Control 0.26.8Gplhost Domain Technologie Control 0.28.6Gplhost Domain Technologie Control 0.28.2Gplhost Domain Technologie Control 0.32.2Gplhost Domain Technologie Control 0.29.14Gplhost Domain Technologie Control 0.29.17Gplhost Domain Technologie Control 0.26.7Gplhost Domain Technologie Control 0.29.16
6.5
CVSSv2
CVE-2011-5273
Directory traversal vulnerability in shared/package-installer in Domain Technologie Control (DTC) prior to 0.34.1 allows remote authenticated users to execute arbitrary PHP code via a .. (dot dot) in the pkg parameter in a do_install action to dtc/.
Gplhost Domain Technologie Control 0.29.8Gplhost Domain Technologie Control 0.28.9Gplhost Domain Technologie Control 0.32.1Gplhost Domain Technologie Control 0.25.3Gplhost Domain Technologie Control 0.30.6Gplhost Domain Technologie Control 0.26.9Gplhost Domain Technologie Control 0.29.1Gplhost Domain Technologie Control 0.27.3Gplhost Domain Technologie Control 0.28.4Gplhost Domain Technologie ControlGplhost Domain Technologie Control 0.32.3Gplhost Domain Technologie Control 0.28.10Gplhost Domain Technologie Control 0.25.1Gplhost Domain Technologie Control 0.30.18Gplhost Domain Technologie Control 0.26.8Gplhost Domain Technologie Control 0.28.6Gplhost Domain Technologie Control 0.28.2Gplhost Domain Technologie Control 0.32.2Gplhost Domain Technologie Control 0.29.14Gplhost Domain Technologie Control 0.29.17Gplhost Domain Technologie Control 0.26.7Gplhost Domain Technologie Control 0.29.16
7.5
CVSSv2
CVE-2011-5274
The drawAdminTools_PackageInstaller function in shared/inc/forms/packager.php in Domain Technologie Control (DTC) prior to 0.32.11 allows remote malicious users to execute arbitrary commands via shell metacharacters in the dtcpkg_directory parameter in a do_install action to dtc/...
Gplhost Domain Technologie Control 0.29.8Gplhost Domain Technologie Control 0.28.9Gplhost Domain Technologie Control 0.32.1Gplhost Domain Technologie Control 0.25.3Gplhost Domain Technologie Control 0.30.6Gplhost Domain Technologie Control 0.26.9Gplhost Domain Technologie Control 0.29.1Gplhost Domain Technologie Control 0.27.3Gplhost Domain Technologie Control 0.28.4Gplhost Domain Technologie Control 0.32.3Gplhost Domain Technologie Control 0.28.10Gplhost Domain Technologie Control 0.25.1Gplhost Domain Technologie Control 0.30.18Gplhost Domain Technologie Control 0.26.8Gplhost Domain Technologie Control 0.28.6Gplhost Domain Technologie Control 0.28.2Gplhost Domain Technologie Control 0.32.2Gplhost Domain Technologie Control 0.29.14Gplhost Domain Technologie ControlGplhost Domain Technologie Control 0.29.17Gplhost Domain Technologie Control 0.26.7Gplhost Domain Technologie Control 0.29.16
7.5
CVSSv2
CVE-2011-5275
The install script in Domain Technologie Control (DTC) prior to 0.34.1 gives sudo permissions for chrootuid to the dtc user, which makes it easier for context-dependent users to gain privileges.
Gplhost Domain Technologie Control 0.29.8Gplhost Domain Technologie Control 0.28.9Gplhost Domain Technologie Control 0.32.1Gplhost Domain Technologie Control 0.25.3Gplhost Domain Technologie Control 0.30.6Gplhost Domain Technologie Control 0.26.9Gplhost Domain Technologie Control 0.29.1Gplhost Domain Technologie Control 0.27.3Gplhost Domain Technologie Control 0.28.4Gplhost Domain Technologie ControlGplhost Domain Technologie Control 0.32.3Gplhost Domain Technologie Control 0.28.10Gplhost Domain Technologie Control 0.25.1Gplhost Domain Technologie Control 0.30.18Gplhost Domain Technologie Control 0.26.8Gplhost Domain Technologie Control 0.28.6Gplhost Domain Technologie Control 0.28.2Gplhost Domain Technologie Control 0.32.2Gplhost Domain Technologie Control 0.29.14Gplhost Domain Technologie Control 0.29.17Gplhost Domain Technologie Control 0.26.7Gplhost Domain Technologie Control 0.29.16
6.5
CVSSv2
CVE-2011-5276
SQL injection vulnerability in the drawAdminTools_PackageInstaller function in shared/inc/forms/packager.php in Domain Technologie Control (DTC) prior to 0.32.11 allows remote authenticated users to execute arbitrary SQL commands via the database_name parameter.
Gplhost Domain Technologie Control 0.29.8Gplhost Domain Technologie Control 0.28.9Gplhost Domain Technologie Control 0.32.1Gplhost Domain Technologie Control 0.25.3Gplhost Domain Technologie Control 0.30.6Gplhost Domain Technologie Control 0.26.9Gplhost Domain Technologie Control 0.29.1Gplhost Domain Technologie Control 0.27.3Gplhost Domain Technologie Control 0.28.4Gplhost Domain Technologie Control 0.32.3Gplhost Domain Technologie Control 0.28.10Gplhost Domain Technologie Control 0.25.1Gplhost Domain Technologie Control 0.30.18Gplhost Domain Technologie Control 0.26.8Gplhost Domain Technologie Control 0.28.6Gplhost Domain Technologie Control 0.28.2Gplhost Domain Technologie Control 0.32.2Gplhost Domain Technologie Control 0.29.14Gplhost Domain Technologie ControlGplhost Domain Technologie Control 0.29.17Gplhost Domain Technologie Control 0.26.7Gplhost Domain Technologie Control 0.29.16
6.5
CVSSv2
CVE-2011-3195
shared/inc/sql/lists.php in Domain Technologie Control (DTC) prior to 0.34.1 allows remote authenticated users to execute arbitrary commands via shell metacharacters in mailing list tunable options.
Gplhost Domain Technologie Control 0.29.8Gplhost Domain Technologie Control 0.28.9Gplhost Domain Technologie Control 0.32.1Gplhost Domain Technologie Control 0.25.3Gplhost Domain Technologie Control 0.30.6Gplhost Domain Technologie Control 0.26.9Gplhost Domain Technologie Control 0.29.1Gplhost Domain Technologie Control 0.27.3Gplhost Domain Technologie Control 0.28.4Gplhost Domain Technologie ControlGplhost Domain Technologie Control 0.32.3Gplhost Domain Technologie Control 0.28.10Gplhost Domain Technologie Control 0.25.1Gplhost Domain Technologie Control 0.30.18Gplhost Domain Technologie Control 0.26.8Gplhost Domain Technologie Control 0.28.6Gplhost Domain Technologie Control 0.28.2Gplhost Domain Technologie Control 0.32.2Gplhost Domain Technologie Control 0.29.14Gplhost Domain Technologie Control 0.29.17Gplhost Domain Technologie Control 0.26.7Gplhost Domain Technologie Control 0.29.16
2.1
CVSSv2
CVE-2011-3196
The setup script in Domain Technologie Control (DTC) prior to 0.34.1 uses world-readable permissions for /etc/apache2/apache2.conf, which allows local users to obtain the dtcdaemons MySQL password by reading the file.
Gplhost Domain Technologie Control 0.29.8Gplhost Domain Technologie Control 0.28.9Gplhost Domain Technologie Control 0.32.1Gplhost Domain Technologie Control 0.25.3Gplhost Domain Technologie Control 0.30.6Gplhost Domain Technologie Control 0.26.9Gplhost Domain Technologie Control 0.29.1Gplhost Domain Technologie Control 0.27.3Gplhost Domain Technologie Control 0.28.4Gplhost Domain Technologie ControlGplhost Domain Technologie Control 0.32.3Gplhost Domain Technologie Control 0.28.10Gplhost Domain Technologie Control 0.25.1Gplhost Domain Technologie Control 0.30.18Gplhost Domain Technologie Control 0.26.8Gplhost Domain Technologie Control 0.28.6Gplhost Domain Technologie Control 0.28.2Gplhost Domain Technologie Control 0.32.2Gplhost Domain Technologie Control 0.29.14Gplhost Domain Technologie Control 0.29.17Gplhost Domain Technologie Control 0.26.7Gplhost Domain Technologie Control 0.29.16
6.5
CVSSv2
CVE-2011-3197
SQL injection vulnerability in Domain Technologie Control (DTC) prior to 0.34.1 allows remote authenticated users to execute arbitrary SQL commands via the addrlink parameter to shared/inc/forms/domain_info.php. NOTE: CVE-2011-3197 has been SPLIT due to findings by different rese...
Gplhost Domain Technologie Control 0.29.8Gplhost Domain Technologie Control 0.28.9Gplhost Domain Technologie Control 0.32.1Gplhost Domain Technologie Control 0.25.3Gplhost Domain Technologie Control 0.30.6Gplhost Domain Technologie Control 0.26.9Gplhost Domain Technologie Control 0.29.1Gplhost Domain Technologie Control 0.27.3Gplhost Domain Technologie Control 0.28.4Gplhost Domain Technologie ControlGplhost Domain Technologie Control 0.32.3Gplhost Domain Technologie Control 0.28.10Gplhost Domain Technologie Control 0.25.1Gplhost Domain Technologie Control 0.30.18Gplhost Domain Technologie Control 0.26.8Gplhost Domain Technologie Control 0.28.6Gplhost Domain Technologie Control 0.28.2Gplhost Domain Technologie Control 0.32.2Gplhost Domain Technologie Control 0.29.14Gplhost Domain Technologie Control 0.29.17Gplhost Domain Technologie Control 0.26.7Gplhost Domain Technologie Control 0.29.16
2.1
CVSSv2
CVE-2011-3198
Domain Technologie Control (DTC) prior to 0.34.1 includes a password in the -b command line argument to htpasswd, which might allow local users to read the password by listing the process and its arguments.
Gplhost Domain Technologie Control 0.29.8Gplhost Domain Technologie Control 0.28.9Gplhost Domain Technologie Control 0.32.1Gplhost Domain Technologie Control 0.25.3Gplhost Domain Technologie Control 0.30.6Gplhost Domain Technologie Control 0.26.9Gplhost Domain Technologie Control 0.29.1Gplhost Domain Technologie Control 0.27.3Gplhost Domain Technologie Control 0.28.4Gplhost Domain Technologie ControlGplhost Domain Technologie Control 0.32.3Gplhost Domain Technologie Control 0.28.10Gplhost Domain Technologie Control 0.25.1Gplhost Domain Technologie Control 0.30.18Gplhost Domain Technologie Control 0.26.8Gplhost Domain Technologie Control 0.28.6Gplhost Domain Technologie Control 0.28.2Gplhost Domain Technologie Control 0.32.2Gplhost Domain Technologie Control 0.29.14Gplhost Domain Technologie Control 0.29.17Gplhost Domain Technologie Control 0.26.7Gplhost Domain Technologie Control 0.29.16
3.5
CVSSv2
CVE-2011-3199
Multiple cross-site scripting (XSS) vulnerabilities in Domain Technologie Control (DTC) prior to 0.34.1 allow remote authenticated users to inject arbitrary web script or HTML via the (1) message body of a support ticket or unspecified vectors to the (2) DNS and (3) MX form, as d...
Gplhost Domain Technologie Control 0.29.8Gplhost Domain Technologie Control 0.28.9Gplhost Domain Technologie Control 0.32.1Gplhost Domain Technologie Control 0.25.3Gplhost Domain Technologie Control 0.30.6Gplhost Domain Technologie Control 0.26.9Gplhost Domain Technologie Control 0.29.1Gplhost Domain Technologie Control 0.27.3Gplhost Domain Technologie Control 0.28.4Gplhost Domain Technologie ControlGplhost Domain Technologie Control 0.32.3Gplhost Domain Technologie Control 0.28.10Gplhost Domain Technologie Control 0.25.1Gplhost Domain Technologie Control 0.30.18Gplhost Domain Technologie Control 0.26.8Gplhost Domain Technologie Control 0.28.6Gplhost Domain Technologie Control 0.28.2Gplhost Domain Technologie Control 0.32.2Gplhost Domain Technologie Control 0.29.14Gplhost Domain Technologie Control 0.29.17Gplhost Domain Technologie Control 0.26.7Gplhost Domain Technologie Control 0.29.16
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2020-17519open redirectCVE-2024-21683cache poisoningCVE-2021-47524CVE-2021-47521CVE-2024-5229CVE-2021-47560local
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook