Approved changes feed: RSS · Atom

cpe:2.3:a:gplhost:domain_technologie_control:0.30.10:*:*:*:*:*:*:*

part: a version: 0.30.10 update: *

VendorGplhost (991da6dd-a634-561e-9aa3-8ae7ec436e20)
ProductDomain Technologie Control (0122654b-28ed-5bcb-9128-05890009cc79)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/zba/dtc purl2cpe 2026-06-01 10:18:08.431242

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2011-5276 vulnerable 2026-06-08 04:59:35.438302 Details available
SQL injection vulnerability in the drawAdminTools_PackageInstaller function in shared/inc/forms/packager.php in Domain Technologie Control (DTC) before 0.32.11 allows remote authenticated users to execute arbitrary SQL commands via the database_name parameter.
Published: 2014-03-20T19:00:00.000Z
Updated: 2024-09-16T20:53:26.539Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-5275 vulnerable 2026-06-08 04:59:35.437264 Details available
The install script in Domain Technologie Control (DTC) before 0.34.1 gives sudo permissions for chrootuid to the dtc user, which makes it easier for context-dependent users to gain privileges.
Published: 2014-03-20T19:00:00.000Z
Updated: 2024-09-16T23:11:36.243Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-5274 vulnerable 2026-06-08 04:59:35.436119 Details available
The drawAdminTools_PackageInstaller function in shared/inc/forms/packager.php in Domain Technologie Control (DTC) before 0.32.11 allows remote attackers to execute arbitrary commands via shell metacharacters in the dtcpkg_directory parameter in a do_install action to dtc/.
Published: 2014-03-20T19:00:00.000Z
Updated: 2024-09-16T16:47:43.031Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-5273 vulnerable 2026-06-08 04:59:35.434785 Details available
Directory traversal vulnerability in shared/package-installer in Domain Technologie Control (DTC) before 0.34.1 allows remote authenticated users to execute arbitrary PHP code via a .. (dot dot) in the pkg parameter in a do_install action to dtc/.
Published: 2014-03-20T19:00:00.000Z
Updated: 2024-09-16T16:13:59.802Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-5272 vulnerable 2026-06-08 04:59:35.427707 Details available
SQL injection vulnerability in Domain Technologie Control (DTC) before 0.34.1 allows remote authenticated users to execute arbitrary SQL commands via the vps_note parameter to dtcadmin/logPushlet.php. NOTE: this issue was originally part of CVE-2011-3197, but that ID was SPLIT due to different researchers.
Published: 2014-03-20T19:00:00.000Z
Updated: 2024-09-16T16:33:53.967Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-3199 vulnerable 2026-06-08 04:58:11.032628 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-3198 vulnerable 2026-06-08 04:58:11.031582 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-3197 vulnerable 2026-06-08 04:58:11.030428 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-3196 vulnerable 2026-06-08 04:58:11.029340 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-3195 vulnerable 2026-06-08 04:58:11.023416 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-0437 vulnerable 2026-06-08 04:56:37.108331 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-0436 vulnerable 2026-06-08 04:56:37.107113 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-0435 vulnerable 2026-06-08 04:56:37.105964 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-0434 vulnerable 2026-06-08 04:56:37.099003 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.