CVE-2011-5274

The drawAdminToolsPackageInstaller function in shared/inc/forms/packager.php in Domain Technologie Control DTC before 0.32.11 allows remote attackers to execute arbitrary commands via shell metacharacters in the dtcpkgdirectory parameter in a doinstall action to dtc/...

PT-2014-2192

Name of the Vulnerable Software and Affected Versions Domain Technologie Control DTC versions prior to 0.32.11 Description The issue allows remote authenticated users to execute arbitrary SQL commands. This is achieved via the database name parameter in the drawAdminTools PackageInstaller functio...