CVE-2011-3195

CVE-2011-3195 affects Domain Technologie Control (DTC) prior to 0.34.1. The vulnerability is in shared/inc/sql/lists.php where remote authenticated users can execute shell commands via metacharacters in mailing list tunable options, enabling command execution with the potential for partial impact...

CVE-2011-5276

CVE-2011-5276 is a SQL injection vulnerability in Domain Technologie Control (DTC) prior to 0.32.11. The flaw occurs in the drawAdminTools_PackageInstaller function, within shared/inc/forms/packager.php, where the database_name parameter can be exploited by remote authenticated users to execute a...

CVE-2011-5272

Affected product: Domain Technologie Control (DTC) prior to 0.34.1. Vulnerability: SQL injection via the vps_note parameter to dtcadmin/logPushlet.php, allowing remote authenticated users to execute arbitrary SQL commands. Root cause (as stated): input handling leads to SQL injection; CVE-2011-52...

Debian Security Advisory DSA 2365-1 (dtc)

The remote host is missing an update to dtc announced via advisory DSA 2365-1. OpenVAS Vulnerability Test $Id: deb23651.nasl 6612 2017-07-07 12:08:03Z cfischer $ Description: Auto-generated from advisory DSA 2365-1 dtc Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc...

Debian: Security Advisory (DSA-2365-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian DSA-2365-1 : dtc - several vulnerabilities

Ansgar Burchardt, Mike O'Connor and Philipp Kern discovered multiple vulnerabilities in DTC, a web control panel for admin and accounting hosting services : - CVE-2011-3195 A possible shell insertion has been found in the mailing list handling. - CVE-2011-3196 Unix rights for the apache2.conf wer...

[SECURITY] [DSA 2365-1] dtc security update

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------- Debian Security Advisory DSA-2365-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff December 18, 2011 http://www.debian.org/security/faq -...

[SECURITY] [DSA 2365-1] dtc security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2365-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff December 18, 2011 http://www.debian.org/security/faq -...

FreeBSD Ports: dtc

The remote host is missing an update to the system as announced in the referenced advisory. VID 879b0242-c5b6-11e0-abd1-0017f22d6707 OpenVAS Vulnerability Test $ Description: Auto generated from VID 879b0242-c5b6-11e0-abd1-0017f22d6707 Authors: Thomas Reinke Copyright: Copyright c 2011 E-Soft Inc...

FreeBSD Ports: dtc

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2011 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

FreeBSD : dtc -- multiple vulnerabilities (879b0242-c5b6-11e0-abd1-0017f22d6707)

Ansgar Burchardt reports : Ansgar Burchardt discovered several vulnerabilities in DTC, a web control panel for admin and accounting hosting services : The bwpermoth.php graph contains a SQL injection vulnerability; insufficient checks in bwpermonth.php can lead to bandwidth usage information...

Debian Security Advisory DSA 2179-1 (dtc)

The remote host is missing an update to dtc announced via advisory DSA 2179-1. OpenVAS Vulnerability Test $Id: deb21791.nasl 6613 2017-07-07 12:08:40Z cfischer $ Description: Auto-generated from advisory DSA 2179-1 dtc Authors: Thomas Reinke Copyright: Copyright c 2011 E-Soft Inc...

Debian: Security Advisory (DSA-2179-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2011-0437

shared/inc/sql/ssh.php in the SSH accounts management implementation in Domain Technologie Control DTC before 0.32.9 allows remote authenticated users to delete arbitrary accounts via the edsshaccount parameter in a deletesshaccount Delete action...

CVE-2011-0435

Domain Technologie Control DTC before 0.32.9 does not require authentication for 1 admin/bwpermonth.php and 2 client/bwpermonth.php, which allows remote attackers to obtain potentially sensitive bandwidth information via a direct request...

CVE-2011-0437

shared/inc/sql/ssh.php in the SSH accounts management implementation in Domain Technologie Control DTC before 0.32.9 allows remote authenticated users to delete arbitrary accounts via the edsshaccount parameter in a deletesshaccount Delete action...

Design/Logic Flaw

Domain Technologie Control DTC before 0.32.9 does not require authentication for 1 admin/bwpermonth.php and 2 client/bwpermonth.php, which allows remote attackers to obtain potentially sensitive bandwidth information via a direct request...

Sql injection

Multiple SQL injection vulnerabilities in Domain Technologie Control DTC before 0.32.9 allow remote attackers to execute arbitrary SQL commands via the cid parameter to 1 admin/bwpermonth.php or 2 client/bwpermonth.php...

CVE-2011-0435

Domain Technologie Control DTC before 0.32.9 does not require authentication for 1 admin/bwpermonth.php and 2 client/bwpermonth.php, which allows remote attackers to obtain potentially sensitive bandwidth information via a direct request...

CVE-2011-0435

Domain Technologie Control DTC before 0.32.9 does not require authentication for 1 admin/bwpermonth.php and 2 client/bwpermonth.php, which allows remote attackers to obtain potentially sensitive bandwidth information via a direct request...