NVD

Id
11526  
Name
CVE-2011-5272  
Description
SQL injection vulnerability in Domain Technologie Control (DTC) before 0.34.1 allows remote authenticated users to execute arbitrary SQL commands via the vps_note parameter to dtcadmin/logPushlet.php. NOTE: this issue was originally part of CVE-2011-3197, but that ID was SPLIT due to different researchers.  
Reject
 
CVSS Version
2  
CVSS Score
6.5  
Severity
Medium  
CVSS Base Score
6.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8  
CVSS Vector
(AV:N/AC:L/Au:S/C:P/I:P/A:P)  
Pub Date
2017-01-07  
Published
2014-03-21  
Modified Date
2014-03-24  
Seq
2011-5272  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
63163 11526 CVE-2011-5272 http://git.gplhost.com/gitweb/?p=dtc.git;a=blob;f=debian/changelog;hb=3eb6ef5cea6c571aae5e49e1930de778eca280c3  View
63164 11526 CVE-2011-5272 DSA-2365  View
63165 11526 CVE-2011-5272 [oss-security] 20110813 Re: CVE request: multiple vulnerabilities in dtc  View
63166 11526 CVE-2011-5272 [oss-security] 20110824 Re: Re: CVE request: multiple vulnerabilities in dtc  View
63167 11526 CVE-2011-5272 https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=637498  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
35061 JVNDB-2011-005303 Domain Technologie Control における SQL インジェクションの脆弱性 Domain Technologie Control (DTC) には、SQL インジェクションの脆弱性が存在します。 CVE-2011-5272 53179 CVE-2011-5272 11526 6.5 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-005303.html 2011-08-12 2014-03-25 View