CVE-2011-5273 Directory traversal vulnerability in shared/package-installer in Domain Technologie Control (DTC) before 0.34.1 allows remote authenticated users to execute arbitrary PHP code via a .. (dot dot) in th...
MediumCVSS 6.5
EPSS 1.5%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Directory traversal vulnerability in shared/package-installer in Domain Technologie Control (DTC) before 0.34.1 allows remote authenticated users to execute arbitrary PHP code via a .. (dot dot) in the pkg parameter in a do_install action to dtc/.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| gplhost domain technologie control | <= 0.32.11 | No fix listed |
| gplhost domain technologie control | = 0.24.6 | No fix listed |
| gplhost domain technologie control | = 0.25.1 | No fix listed |
| gplhost domain technologie control | = 0.25.2 | No fix listed |
| gplhost domain technologie control | = 0.25.3 | No fix listed |
| gplhost domain technologie control | = 0.26.7 | No fix listed |
| gplhost domain technologie control | = 0.26.8 | No fix listed |
| gplhost domain technologie control | = 0.26.9 | No fix listed |
| gplhost domain technologie control | = 0.27.3 | No fix listed |
| gplhost domain technologie control | = 0.28.2 | No fix listed |
| gplhost domain technologie control | = 0.28.3 | No fix listed |
| gplhost domain technologie control | = 0.28.4 | No fix listed |
| gplhost domain technologie control | = 0.28.6 | No fix listed |
| gplhost domain technologie control | = 0.28.9 | No fix listed |
| gplhost domain technologie control | = 0.28.10 | No fix listed |
| gplhost domain technologie control | = 0.29.1 | No fix listed |
| gplhost domain technologie control | = 0.29.6 | No fix listed |
| gplhost domain technologie control | = 0.29.8 | No fix listed |
| gplhost domain technologie control | = 0.29.10 | No fix listed |
| gplhost domain technologie control | = 0.29.14 | No fix listed |
| gplhost domain technologie control | = 0.29.15 | No fix listed |
| gplhost domain technologie control | = 0.29.16 | No fix listed |
| gplhost domain technologie control | = 0.29.17 | No fix listed |
| gplhost domain technologie control | = 0.30.6 | No fix listed |
| gplhost domain technologie control | = 0.30.8 | No fix listed |
Show 10 more
| Product | Affected versions | Fixed in |
|---|---|---|
| gplhost domain technologie control | = 0.30.10 | No fix listed |
| gplhost domain technologie control | = 0.30.18 | No fix listed |
| gplhost domain technologie control | = 0.30.20 | No fix listed |
| gplhost domain technologie control | = 0.32.1 | No fix listed |
| gplhost domain technologie control | = 0.32.2 | No fix listed |
| gplhost domain technologie control | = 0.32.3 | No fix listed |
| gplhost domain technologie control | = 0.32.4 | No fix listed |
| gplhost domain technologie control | = 0.32.5 | No fix listed |
| gplhost domain technologie control | = 0.32.6 | No fix listed |
| gplhost domain technologie control | = 0.32.7 | No fix listed |
References
- git.gplhost.com
- DSA-2365 vendor-advisory
- bugs.debian.org