PT-2014-2190

Name of the Vulnerable Software and Affected Versions Domain Technologie Control DTC versions prior to 0.32.11 Description The issue allows remote attackers to execute arbitrary commands. This is achieved by injecting shell metacharacters into the dtcpkg directory parameter in a do install action...

PT-2014-2189

Name of the Vulnerable Software and Affected Versions Domain Technologie Control DTC versions prior to 0.34.1 Description A directory traversal issue exists, allowing remote authenticated users to execute arbitrary PHP code. This is achieved by including a .. dot dot in the pkg parameter within a...