CVE-2011-0434 Multiple SQL injection vulnerabilities in Domain Technologie Control (DTC) before 0.32.9 allow remote attackers to execute arbitrary SQL commands via the cid parameter to (1) admin/bw_per_month.php or...
HighCVSS 7.5
EPSS 1.6%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple SQL injection vulnerabilities in Domain Technologie Control (DTC) before 0.32.9 allow remote attackers to execute arbitrary SQL commands via the cid parameter to (1) admin/bw_per_month.php or (2) client/bw_per_month.php.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| gplhost domain technologie control | <= 0.32.8 | No fix listed |
| gplhost domain technologie control | = 0.24.6 | No fix listed |
| gplhost domain technologie control | = 0.25.1 | No fix listed |
| gplhost domain technologie control | = 0.25.2 | No fix listed |
| gplhost domain technologie control | = 0.25.3 | No fix listed |
| gplhost domain technologie control | = 0.26.7 | No fix listed |
| gplhost domain technologie control | = 0.26.8 | No fix listed |
| gplhost domain technologie control | = 0.26.9 | No fix listed |
| gplhost domain technologie control | = 0.27.3 | No fix listed |
| gplhost domain technologie control | = 0.28.2 | No fix listed |
| gplhost domain technologie control | = 0.28.3 | No fix listed |
| gplhost domain technologie control | = 0.28.4 | No fix listed |
| gplhost domain technologie control | = 0.28.6 | No fix listed |
| gplhost domain technologie control | = 0.28.9 | No fix listed |
| gplhost domain technologie control | = 0.28.10 | No fix listed |
| gplhost domain technologie control | = 0.29.1 | No fix listed |
| gplhost domain technologie control | = 0.29.6 | No fix listed |
| gplhost domain technologie control | = 0.29.8 | No fix listed |
| gplhost domain technologie control | = 0.29.10 | No fix listed |
| gplhost domain technologie control | = 0.29.14 | No fix listed |
| gplhost domain technologie control | = 0.29.15 | No fix listed |
| gplhost domain technologie control | = 0.29.16 | No fix listed |
| gplhost domain technologie control | = 0.29.17 | No fix listed |
| gplhost domain technologie control | = 0.30.6 | No fix listed |
| gplhost domain technologie control | = 0.30.8 | No fix listed |
Show 10 more
| Product | Affected versions | Fixed in |
|---|---|---|
| gplhost domain technologie control | = 0.30.10 | No fix listed |
| gplhost domain technologie control | = 0.30.18 | No fix listed |
| gplhost domain technologie control | = 0.30.20 | No fix listed |
| gplhost domain technologie control | = 0.32.1 | No fix listed |
| gplhost domain technologie control | = 0.32.2 | No fix listed |
| gplhost domain technologie control | = 0.32.3 | No fix listed |
| gplhost domain technologie control | = 0.32.4 | No fix listed |
| gplhost domain technologie control | = 0.32.5 | No fix listed |
| gplhost domain technologie control | = 0.32.6 | No fix listed |
| gplhost domain technologie control | = 0.32.7 | No fix listed |
References
- git.gplhost.com
- git.gplhost.com
- packages.debian.org
- packages.debian.org
- 43523 third-party-advisory vendor-advisory
- DSA-2179 vendor-advisory
- [dtcannounce] 20110303 Fwd: [SECURITY] [DSA 2179-1] dtc security update mailing-list patch
- ADV-2011-0556 vdb-entry vendor-advisory
- dtc-cid-sql-injection(65895) vdb-entry