EUVD-2011-3161

Malware in sbrugna...

EUVD-2011-5171

Malware in sbrugna...

EUVD-2011-0459

Malware in sbrugna...

EUVD-2011-3159

Malware in sbrugna...

EUVD-2009-0406

Malware in sbrugna...

EUVD-2011-3163

Malware in sbrugna...

EUVD-2011-5172

Malware in sbrugna...

EUVD-2011-5174

Malware in sbrugna...

EUVD-2007-3203

Malware in sbrugna...

EUVD-2011-0460

Malware in sbrugna...

EUVD-2011-0462

Malware in sbrugna...

EUVD-2011-0461

Malware in sbrugna...

EUVD-2011-5175

Malware in sbrugna...

EUVD-2011-5173

Malware in sbrugna...

EUVD-2011-3160

Malware in sbrugna...

CVE-2011-5274

The drawAdminToolsPackageInstaller function in shared/inc/forms/packager.php in Domain Technologie Control DTC before 0.32.11 allows remote attackers to execute arbitrary commands via shell metacharacters in the dtcpkgdirectory parameter in a doinstall action to dtc/...

CVE-2011-5276

SQL injection vulnerability in the drawAdminToolsPackageInstaller function in shared/inc/forms/packager.php in Domain Technologie Control DTC before 0.32.11 allows remote authenticated users to execute arbitrary SQL commands via the databasename parameter...

CVE-2011-5275

The install script in Domain Technologie Control DTC before 0.34.1 gives sudo permissions for chrootuid to the dtc user, which makes it easier for context-dependent users to gain privileges...

CVE-2011-5272

SQL injection vulnerability in Domain Technologie Control DTC before 0.34.1 allows remote authenticated users to execute arbitrary SQL commands via the vpsnote parameter to dtcadmin/logPushlet.php. NOTE: this issue was originally part of CVE-2011-3197, but that ID was SPLIT due to different...

CVE-2011-5273

Directory traversal vulnerability in shared/package-installer in Domain Technologie Control DTC before 0.34.1 allows remote authenticated users to execute arbitrary PHP code via a .. dot dot in the pkg parameter in a doinstall action to dtc/...