CVE-2011-5276

SQL injection vulnerability in the drawAdminTools_PackageInstaller function in shared/inc/forms/packager.php in Domain Technologie Control (DTC) before 0.32.11 allows remote authenticated users to execute arbitrary SQL commands via the database_name parameter.

CVSS v2.0 6.5 MEDIUM

6.5^/10

CVSS v2.0 : MEDIUM

V2 Legend

Vector : AV:N/AC:L/Au:S/C:P/I:P/A:P

Exploitability : 8.0 / Impact : 6.4

Access Vector NETWORK

Access Complexity LOW

Authentication SINGLE

Confidentiality Impact PARTIAL

Integrity Impact PARTIAL

Availability Impact PARTIAL

References

Link	Resource
http://git.gplhost.com/gitweb/?p=dtc.git%3Ba=blob%3Bf=debian/changelog%3Bh=dec9970db76b82295e9003ca34cecab8d629da4f%3Bhb=65a7a1b166ea3c4325efd4da80a78498c829aa5a
http://git.gplhost.com/gitweb/?p=dtc.git%3Ba=commitdiff%3Bh=541d8457a6989a1a925bb866ed972a5f07c2de64
http://www.debian.org/security/2011/dsa-2365
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=637632
http://git.gplhost.com/gitweb/?p=dtc.git%3Ba=blob%3Bf=debian/changelog%3Bh=dec9970db76b82295e9003ca34cecab8d629da4f%3Bhb=65a7a1b166ea3c4325efd4da80a78498c829aa5a
http://git.gplhost.com/gitweb/?p=dtc.git%3Ba=commitdiff%3Bh=541d8457a6989a1a925bb866ed972a5f07c2de64
http://www.debian.org/security/2011/dsa-2365
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=637632

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:gplhost:domain_technologie_control::::::::
	cpe:2.3:a:gplhost:domain_technologie_control:0.24.6:::::::*
	cpe:2.3:a:gplhost:domain_technologie_control:0.25.1:::::::*
	cpe:2.3:a:gplhost:domain_technologie_control:0.25.2:::::::*
	cpe:2.3:a:gplhost:domain_technologie_control:0.25.3:::::::*
	cpe:2.3:a:gplhost:domain_technologie_control:0.26.7:::::::*
	cpe:2.3:a:gplhost:domain_technologie_control:0.26.8:::::::*
	cpe:2.3:a:gplhost:domain_technologie_control:0.26.9:::::::*
	cpe:2.3:a:gplhost:domain_technologie_control:0.27.3:::::::*
	cpe:2.3:a:gplhost:domain_technologie_control:0.28.2:::::::*
	cpe:2.3:a:gplhost:domain_technologie_control:0.28.3:::::::*
	cpe:2.3:a:gplhost:domain_technologie_control:0.28.4:::::::*
	cpe:2.3:a:gplhost:domain_technologie_control:0.28.6:::::::*
	cpe:2.3:a:gplhost:domain_technologie_control:0.28.9:::::::*
	cpe:2.3:a:gplhost:domain_technologie_control:0.28.10:::::::*
	cpe:2.3:a:gplhost:domain_technologie_control:0.29.1:::::::*
	cpe:2.3:a:gplhost:domain_technologie_control:0.29.6:::::::*
	cpe:2.3:a:gplhost:domain_technologie_control:0.29.8:::::::*
	cpe:2.3:a:gplhost:domain_technologie_control:0.29.10:::::::*
	cpe:2.3:a:gplhost:domain_technologie_control:0.29.14:::::::*
	cpe:2.3:a:gplhost:domain_technologie_control:0.29.15:::::::*
	cpe:2.3:a:gplhost:domain_technologie_control:0.29.16:::::::*
	cpe:2.3:a:gplhost:domain_technologie_control:0.29.17:::::::*
	cpe:2.3:a:gplhost:domain_technologie_control:0.30.6:::::::*
	cpe:2.3:a:gplhost:domain_technologie_control:0.30.8:::::::*
	cpe:2.3:a:gplhost:domain_technologie_control:0.30.10:::::::*
	cpe:2.3:a:gplhost:domain_technologie_control:0.30.18:::::::*
	cpe:2.3:a:gplhost:domain_technologie_control:0.30.20:::::::*
	cpe:2.3:a:gplhost:domain_technologie_control:0.32.1:::::::*
	cpe:2.3:a:gplhost:domain_technologie_control:0.32.2:::::::*
	cpe:2.3:a:gplhost:domain_technologie_control:0.32.3:::::::*
	cpe:2.3:a:gplhost:domain_technologie_control:0.32.4:::::::*
	cpe:2.3:a:gplhost:domain_technologie_control:0.32.5:::::::*
	cpe:2.3:a:gplhost:domain_technologie_control:0.32.6:::::::*

History

21 Nov 2024, 01:34

Type	Values Removed	Values Added
References	~~() http://git.gplhost.com/gitweb/?p=dtc.git%3Ba=blob%3Bf=debian/changelog%3Bh=dec9970db76b82295e9003ca34cecab8d629da4f%3Bhb=65a7a1b166ea3c4325efd4da80a78498c829aa5a -~~	() http://git.gplhost.com/gitweb/?p=dtc.git%3Ba=blob%3Bf=debian/changelog%3Bh=dec9970db76b82295e9003ca34cecab8d629da4f%3Bhb=65a7a1b166ea3c4325efd4da80a78498c829aa5a -
References	~~() http://git.gplhost.com/gitweb/?p=dtc.git%3Ba=commitdiff%3Bh=541d8457a6989a1a925bb866ed972a5f07c2de64 -~~	() http://git.gplhost.com/gitweb/?p=dtc.git%3Ba=commitdiff%3Bh=541d8457a6989a1a925bb866ed972a5f07c2de64 -
References	~~() http://www.debian.org/security/2011/dsa-2365 -~~	() http://www.debian.org/security/2011/dsa-2365 -
References	~~() https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=637632 -~~	() https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=637632 -

07 Nov 2023, 02:09

Type	Values Removed	Values Added
References	{'url': 'http://git.gplhost.com/gitweb/?p=dtc.git;a=commitdiff;h=541d8457a6989a1a925bb866ed972a5f07c2de64', 'name': 'http://git.gplhost.com/gitweb/?p=dtc.git;a=commitdiff;h=541d8457a6989a1a925bb866ed972a5f07c2de64', 'tags': [], 'refsource': 'CONFIRM'} {'url': 'http://git.gplhost.com/gitweb/?p=dtc.git;a=blob;f=debian/changelog;h=dec9970db76b82295e9003ca34cecab8d629da4f;hb=65a7a1b166ea3c4325efd4da80a78498c829aa5a', 'name': 'http://git.gplhost.com/gitweb/?p=dtc.git;a=blob;f=debian/changelog;h=dec9970db76b82295e9003ca34cecab8d629da4f;hb=65a7a1b166ea3c4325efd4da80a78498c829aa5a', 'tags': [], 'refsource': 'CONFIRM'}	() http://git.gplhost.com/gitweb/?p=dtc.git%3Ba=commitdiff%3Bh=541d8457a6989a1a925bb866ed972a5f07c2de64 - () http://git.gplhost.com/gitweb/?p=dtc.git%3Ba=blob%3Bf=debian/changelog%3Bh=dec9970db76b82295e9003ca34cecab8d629da4f%3Bhb=65a7a1b166ea3c4325efd4da80a78498c829aa5a -

Information

Published : 2014-03-21 04:38

Updated : 2024-11-21 01:34

NVD link : CVE-2011-5276

Mitre link : CVE-2011-5276

CVE.ORG link : CVE-2011-5276

JSON object : View

Products Affected

gplhost

domain_technologie_control

CWE

CWE-89

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

6.5 /10