CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

4 matches found

Mend•added 2011/03/07 8:00 p.m.•9 views

CVE-2011-0434

Multiple SQL injection vulnerabilities in Domain Technologie Control DTC before 0.32.9 allow remote attackers to execute arbitrary SQL commands via the cid parameter to 1 admin/bwpermonth.php or 2 client/bwpermonth.php...

7.5CVSS0.01607EPSS

SaveExploits0References10

Mend•added 2011/03/07 8:00 p.m.•8 views

CVE-2011-0435

Domain Technologie Control DTC before 0.32.9 does not require authentication for 1 admin/bwpermonth.php and 2 client/bwpermonth.php, which allows remote attackers to obtain potentially sensitive bandwidth information via a direct request...

6.9CVSS0.01973EPSS

SaveExploits0References10

Rapid7 Vulnerability Database (full)•added 2011/03/07 12:00 a.m.•10 views

CVE-2011-0434: Improper Neutralization of Special Elements used in an SQL Command

7.5CVSS6.4AI score0.01607EPSS

SaveExploits0References2

Rapid7 Vulnerability Database (full)•added 2011/03/07 12:00 a.m.•9 views

CVE-2011-0435: Improper Authentication

5CVSS5.8AI score0.01973EPSS

SaveExploits0References2

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by