Lucene search
K
Database
Vendors
Products
Timeline
Vulnerabilities
Perimeter Scanner
Scanning
Projects
Scanner
Agent Scanning
API Scanning
Manual Audit
Email
Webhook
Resources
Documents
Blog
Glossary
FAQ
Plugins
Pricing
Contacts
About Us
Partners
Branding Guideline
Settings
Sign in
GplhostDomain Technologie Control0.32.11

8 matches found

CVE
CVE•added 2014/03/21 4:38 a.m.•56 views

CVE-2011-3196

The setup script in Domain Technologie Control (DTC) before 0.34.1 uses world-readable permissions for /etc/apache2/apache2.conf, which allows local users to obtain the dtcdaemons MySQL password by reading the file.

2.1CVSS6.2AI score0.00053EPSS
CVE
CVE•added 2014/03/21 4:38 a.m.•52 views

CVE-2011-3198

Domain Technologie Control (DTC) before 0.34.1 includes a password in the -b command line argument to htpasswd, which might allow local users to read the password by listing the process and its arguments.

2.1CVSS6.4AI score0.00071EPSS
CVE
CVE•added 2014/03/21 4:38 a.m.•49 views

CVE-2011-3195

shared/inc/sql/lists.php in Domain Technologie Control (DTC) before 0.34.1 allows remote authenticated users to execute arbitrary commands via shell metacharacters in mailing list tunable options.

6.5CVSS7.2AI score0.00709EPSS
Web
CVE
CVE•added 2014/03/21 4:38 a.m.•46 views

CVE-2011-3197

SQL injection vulnerability in Domain Technologie Control (DTC) before 0.34.1 allows remote authenticated users to execute arbitrary SQL commands via the addrlink parameter to shared/inc/forms/domain_info.php. NOTE: CVE-2011-3197 has been SPLIT due to findings by different researchers. CVE-2011-527...

6.5CVSS7.9AI score0.00601EPSS
Web
CVE
CVE•added 2014/03/21 4:38 a.m.•46 views

CVE-2011-3199

Multiple cross-site scripting (XSS) vulnerabilities in Domain Technologie Control (DTC) before 0.34.1 allow remote authenticated users to inject arbitrary web script or HTML via the (1) message body of a support ticket or unspecified vectors to the (2) DNS and (3) MX form, as demonstrated by the "D...

3.5CVSS5.3AI score0.00232EPSS
CVE
CVE•added 2014/03/21 4:38 a.m.•35 views

CVE-2011-5272

SQL injection vulnerability in Domain Technologie Control (DTC) before 0.34.1 allows remote authenticated users to execute arbitrary SQL commands via the vps_note parameter to dtcadmin/logPushlet.php. NOTE: this issue was originally part of CVE-2011-3197, but that ID was SPLIT due to different rese...

6.5CVSS7.9AI score0.00601EPSS
Web
CVE
CVE•added 2014/03/21 4:38 a.m.•34 views

CVE-2011-5273

Directory traversal vulnerability in shared/package-installer in Domain Technologie Control (DTC) before 0.34.1 allows remote authenticated users to execute arbitrary PHP code via a .. (dot dot) in the pkg parameter in a do_install action to dtc/.

6.5CVSS7.4AI score0.01135EPSS
Web
CVE
CVE•added 2014/03/21 4:38 a.m.•29 views

CVE-2011-5275

The install script in Domain Technologie Control (DTC) before 0.34.1 gives sudo permissions for chrootuid to the dtc user, which makes it easier for context-dependent users to gain privileges.

7.5CVSS6.9AI score0.00252EPSS