CVE-2011-0434

CVE-2011-0434 concerns Domain Technologie Control (DTC) prior to 0.32.9. The vulnerability is a SQL injection in the cid parameter of bw_per_month.php endpoints (admin and client paths), enabling remote attackers to inject arbitrary SQL via the affected web interface. Public sources also note rel...

[SECURITY] [DSA 2179-1] dtc security update

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------- Debian Security Advisory DSA-2179-1 [email protected] http://www.debian.org/security/ Florian Weimer March 02, 2011 http://www.debian.org/security/faq -...

[SECURITY] [DSA 2179-1] dtc security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2179-1 [email protected] http://www.debian.org/security/ Florian Weimer March 02, 2011 http://www.debian.org/security/faq -...