Lucene search

K
cvelistMitreCVELIST:CVE-2011-5272
HistoryMar 20, 2014 - 7:00 p.m.

CVE-2011-5272

2014-03-2019:00:00
mitre
www.cve.org
4
sql injection
domain technologie control
dtc
vps_note parameter
cve-2011-5272

AI Score

7.7

Confidence

Low

EPSS

0.003

Percentile

66.3%

SQL injection vulnerability in Domain Technologie Control (DTC) before 0.34.1 allows remote authenticated users to execute arbitrary SQL commands via the vps_note parameter to dtcadmin/logPushlet.php. NOTE: this issue was originally part of CVE-2011-3197, but that ID was SPLIT due to different researchers.

AI Score

7.7

Confidence

Low

EPSS

0.003

Percentile

66.3%