CVE-2011-5274 The drawAdminTools_PackageInstaller function in shared/inc/forms/packager.php in Domain Technologie Control (DTC) before 0.32.11 allows remote attackers to execute arbitrary commands via shell metacha...
HighCVSS 7.5
EPSS 2.0%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The drawAdminTools_PackageInstaller function in shared/inc/forms/packager.php in Domain Technologie Control (DTC) before 0.32.11 allows remote attackers to execute arbitrary commands via shell metacharacters in the dtcpkg_directory parameter in a do_install action to dtc/.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| gplhost domain technologie control | <= 0.32.7 | No fix listed |
| gplhost domain technologie control | = 0.24.6 | No fix listed |
| gplhost domain technologie control | = 0.25.1 | No fix listed |
| gplhost domain technologie control | = 0.25.2 | No fix listed |
| gplhost domain technologie control | = 0.25.3 | No fix listed |
| gplhost domain technologie control | = 0.26.7 | No fix listed |
| gplhost domain technologie control | = 0.26.8 | No fix listed |
| gplhost domain technologie control | = 0.26.9 | No fix listed |
| gplhost domain technologie control | = 0.27.3 | No fix listed |
| gplhost domain technologie control | = 0.28.2 | No fix listed |
| gplhost domain technologie control | = 0.28.3 | No fix listed |
| gplhost domain technologie control | = 0.28.4 | No fix listed |
| gplhost domain technologie control | = 0.28.6 | No fix listed |
| gplhost domain technologie control | = 0.28.9 | No fix listed |
| gplhost domain technologie control | = 0.28.10 | No fix listed |
| gplhost domain technologie control | = 0.29.1 | No fix listed |
| gplhost domain technologie control | = 0.29.6 | No fix listed |
| gplhost domain technologie control | = 0.29.8 | No fix listed |
| gplhost domain technologie control | = 0.29.10 | No fix listed |
| gplhost domain technologie control | = 0.29.14 | No fix listed |
| gplhost domain technologie control | = 0.29.15 | No fix listed |
| gplhost domain technologie control | = 0.29.16 | No fix listed |
| gplhost domain technologie control | = 0.29.17 | No fix listed |
| gplhost domain technologie control | = 0.30.6 | No fix listed |
| gplhost domain technologie control | = 0.30.8 | No fix listed |
Show 9 more
| Product | Affected versions | Fixed in |
|---|---|---|
| gplhost domain technologie control | = 0.30.10 | No fix listed |
| gplhost domain technologie control | = 0.30.18 | No fix listed |
| gplhost domain technologie control | = 0.30.20 | No fix listed |
| gplhost domain technologie control | = 0.32.1 | No fix listed |
| gplhost domain technologie control | = 0.32.2 | No fix listed |
| gplhost domain technologie control | = 0.32.3 | No fix listed |
| gplhost domain technologie control | = 0.32.4 | No fix listed |
| gplhost domain technologie control | = 0.32.5 | No fix listed |
| gplhost domain technologie control | = 0.32.6 | No fix listed |
References
- git.gplhost.com
- git.gplhost.com
- DSA-2365 vendor-advisory
- bugs.debian.org