Lucene search

K
cve[email protected]CVE-2011-5276
HistoryOct 03, 2022 - 4:15 p.m.

CVE-2011-5276

2022-10-0316:15:12
CWE-89
web.nvd.nist.gov
19
cve-2011-5276
sql injection
drawadmintools_packageinstaller
domain technologie control
dtc
vulnerability
remote authenticated users
arbitrary sql commands
nvd

6.5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

8.2 High

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

54.7%

SQL injection vulnerability in the drawAdminTools_PackageInstaller function in shared/inc/forms/packager.php in Domain Technologie Control (DTC) before 0.32.11 allows remote authenticated users to execute arbitrary SQL commands via the database_name parameter.

Affected configurations

NVD
Node
gplhostdomain_technologie_controlRange0.32.7
OR
gplhostdomain_technologie_controlMatch0.24.6
OR
gplhostdomain_technologie_controlMatch0.25.1
OR
gplhostdomain_technologie_controlMatch0.25.2
OR
gplhostdomain_technologie_controlMatch0.25.3
OR
gplhostdomain_technologie_controlMatch0.26.7
OR
gplhostdomain_technologie_controlMatch0.26.8
OR
gplhostdomain_technologie_controlMatch0.26.9
OR
gplhostdomain_technologie_controlMatch0.27.3
OR
gplhostdomain_technologie_controlMatch0.28.2
OR
gplhostdomain_technologie_controlMatch0.28.3
OR
gplhostdomain_technologie_controlMatch0.28.4
OR
gplhostdomain_technologie_controlMatch0.28.6
OR
gplhostdomain_technologie_controlMatch0.28.9
OR
gplhostdomain_technologie_controlMatch0.28.10
OR
gplhostdomain_technologie_controlMatch0.29.1
OR
gplhostdomain_technologie_controlMatch0.29.6
OR
gplhostdomain_technologie_controlMatch0.29.8
OR
gplhostdomain_technologie_controlMatch0.29.10
OR
gplhostdomain_technologie_controlMatch0.29.14
OR
gplhostdomain_technologie_controlMatch0.29.15
OR
gplhostdomain_technologie_controlMatch0.29.16
OR
gplhostdomain_technologie_controlMatch0.29.17
OR
gplhostdomain_technologie_controlMatch0.30.6
OR
gplhostdomain_technologie_controlMatch0.30.8
OR
gplhostdomain_technologie_controlMatch0.30.10
OR
gplhostdomain_technologie_controlMatch0.30.18
OR
gplhostdomain_technologie_controlMatch0.30.20
OR
gplhostdomain_technologie_controlMatch0.32.1
OR
gplhostdomain_technologie_controlMatch0.32.2
OR
gplhostdomain_technologie_controlMatch0.32.3
OR
gplhostdomain_technologie_controlMatch0.32.4
OR
gplhostdomain_technologie_controlMatch0.32.5
OR
gplhostdomain_technologie_controlMatch0.32.6

6.5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

8.2 High

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

54.7%

Related for CVE-2011-5276