Approved changes feed: RSS · Atom

cpe:2.3:a:gplhost:domain_technologie_control:0.29.17:*:*:*:*:*:*:*

part: a version: 0.29.17 update: *

VendorGplhost (991da6dd-a634-561e-9aa3-8ae7ec436e20)
ProductDomain Technologie Control (0122654b-28ed-5bcb-9128-05890009cc79)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/zba/dtc purl2cpe 2026-06-01 10:18:08.428433

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2011-5276 vulnerable 2026-06-08 04:59:35.438250 Details available
SQL injection vulnerability in the drawAdminTools_PackageInstaller function in shared/inc/forms/packager.php in Domain Technologie Control (DTC) before 0.32.11 allows remote authenticated users to execute arbitrary SQL commands via the database_name parameter.
Published: 2014-03-20T19:00:00.000Z
Updated: 2024-09-16T20:53:26.539Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-5275 vulnerable 2026-06-08 04:59:35.437217 Details available
The install script in Domain Technologie Control (DTC) before 0.34.1 gives sudo permissions for chrootuid to the dtc user, which makes it easier for context-dependent users to gain privileges.
Published: 2014-03-20T19:00:00.000Z
Updated: 2024-09-16T23:11:36.243Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-5274 vulnerable 2026-06-08 04:59:35.436068 Details available
The drawAdminTools_PackageInstaller function in shared/inc/forms/packager.php in Domain Technologie Control (DTC) before 0.32.11 allows remote attackers to execute arbitrary commands via shell metacharacters in the dtcpkg_directory parameter in a do_install action to dtc/.
Published: 2014-03-20T19:00:00.000Z
Updated: 2024-09-16T16:47:43.031Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-5273 vulnerable 2026-06-08 04:59:35.434734 Details available
Directory traversal vulnerability in shared/package-installer in Domain Technologie Control (DTC) before 0.34.1 allows remote authenticated users to execute arbitrary PHP code via a .. (dot dot) in the pkg parameter in a do_install action to dtc/.
Published: 2014-03-20T19:00:00.000Z
Updated: 2024-09-16T16:13:59.802Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-5272 vulnerable 2026-06-08 04:59:35.426080 Details available
SQL injection vulnerability in Domain Technologie Control (DTC) before 0.34.1 allows remote authenticated users to execute arbitrary SQL commands via the vps_note parameter to dtcadmin/logPushlet.php. NOTE: this issue was originally part of CVE-2011-3197, but that ID was SPLIT due to different researchers.
Published: 2014-03-20T19:00:00.000Z
Updated: 2024-09-16T16:33:53.967Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-3199 vulnerable 2026-06-08 04:58:11.032579 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-3198 vulnerable 2026-06-08 04:58:11.031533 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-3197 vulnerable 2026-06-08 04:58:11.030380 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-3196 vulnerable 2026-06-08 04:58:11.029290 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-3195 vulnerable 2026-06-08 04:58:11.021814 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-0437 vulnerable 2026-06-08 04:56:37.108285 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-0436 vulnerable 2026-06-08 04:56:37.107067 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-0435 vulnerable 2026-06-08 04:56:37.105913 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-0434 vulnerable 2026-06-08 04:56:37.097074 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.