CVE-2011-3197

2014-03-2100:00:00

ubuntu.com

CVSS2

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

EPSS

0.003

Percentile

66.3%

JSON

SQL injection vulnerability in Domain Technologie Control (DTC) before
0.34.1 allows remote authenticated users to execute arbitrary SQL commands
via the addrlink parameter to shared/inc/forms/domain_info.php. NOTE:
CVE-2011-3197 has been SPLIT due to findings by different researchers.
CVE-2011-5272 has been assigned for the vps_note parameter to
dtcadmin/logPushlet.php vector.