Domain Technologie Control Security Vulnerabilities and Issues — Domain Technologie Control CVE List

Lucene search

GplhostDomain Technologie Control

2 matches found

CVE•added 2011/03/07 9:0 p.m.•40 views

CVE-2011-0435

Domain Technologie Control (DTC) before 0.32.9 does not require authentication for (1) admin/bw_per_month.php and (2) client/bw_per_month.php, which allows remote attackers to obtain potentially sensitive bandwidth information via a direct request.

5CVSS6.3AI score0.00833EPSS

CVE•added 2011/03/07 9:0 p.m.•39 views

CVE-2011-0436

The register_user function in client/new_account_form.php in Domain Technologie Control (DTC) before 0.32.9 includes a cleartext password in an e-mail message, which makes it easier for remote attackers to obtain sensitive information by sniffing the network.

5CVSS6.1AI score0.00782EPSS

Web