CVE-2011-5276

SQL injection vulnerability in the drawAdminToolsPackageInstaller function in shared/inc/forms/packager.php in Domain Technologie Control DTC before 0.32.11 allows remote authenticated users to execute arbitrary SQL commands via the databasename parameter...

PT-2014-2190

Name of the Vulnerable Software and Affected Versions Domain Technologie Control DTC versions prior to 0.32.11 Description The issue allows remote attackers to execute arbitrary commands. This is achieved by injecting shell metacharacters into the dtcpkg directory parameter in a do install action...

CVE-2011-5274: Undefined Security Weakness

The drawAdminToolsPackageInstaller function in shared/inc/forms/packager.php in Domain Technologie Control DTC before 0.32.11 allows remote attackers to execute arbitrary commands via shell metacharacters in the dtcpkgdirectory parameter in a doinstall action to dtc/...