Lucene search

K
ubuntucveUbuntu.comUB:CVE-2011-0434
HistoryMar 07, 2011 - 12:00 a.m.

CVE-2011-0434

2011-03-0700:00:00
ubuntu.com
ubuntu.com
12

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.004 Low

EPSS

Percentile

74.9%

Multiple SQL injection vulnerabilities in Domain Technologie Control (DTC)
before 0.32.9 allow remote attackers to execute arbitrary SQL commands via
the cid parameter to (1) admin/bw_per_month.php or (2)
client/bw_per_month.php.

Bugs

OSVersionArchitecturePackageVersionFilename
ubuntu8.04noarchdtc< 0.25.3-2ubuntu1.1UNKNOWN
ubuntu9.10noarchdtc< 0.29.17-1+lenny1build0.9.10.1UNKNOWN
ubuntu10.04noarchdtc< 0.30.10-1ubuntu1UNKNOWN
ubuntu10.10noarchdtc< 0.30.18-1ubuntu1UNKNOWN

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.004 Low

EPSS

Percentile

74.9%