NVD

Id
11530  
Name
CVE-2011-5276  
Description
SQL injection vulnerability in the drawAdminTools_PackageInstaller function in shared/inc/forms/packager.php in Domain Technologie Control (DTC) before 0.32.11 allows remote authenticated users to execute arbitrary SQL commands via the database_name parameter.  
Reject
 
CVSS Version
2  
CVSS Score
6.5  
Severity
Medium  
CVSS Base Score
6.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8  
CVSS Vector
(AV:N/AC:L/Au:S/C:P/I:P/A:P)  
Pub Date
2017-01-07  
Published
2014-03-21  
Modified Date
2014-03-21  
Seq
2011-5276  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
63178 11530 CVE-2011-5276 http://git.gplhost.com/gitweb/?p=dtc.git;a=blob;f=debian/changelog;h=dec9970db76b82295e9003ca34cecab8d629da4f;hb=65a7a1b166ea3c4325efd4da80a78498c829aa5a  View
63179 11530 CVE-2011-5276 http://git.gplhost.com/gitweb/?p=dtc.git;a=commitdiff;h=541d8457a6989a1a925bb866ed972a5f07c2de64  View
63180 11530 CVE-2011-5276 DSA-2365  View
63181 11530 CVE-2011-5276 https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=637632  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
35065 JVNDB-2011-005307 Domain Technologie Control の shared/inc/forms/packager.php における SQL インジェクションの脆弱性 Domain Technologie Control (DTC) の shared/inc/forms/packager.php の drawAdminTools_PackageInstaller 関数には、SQL インジェクションの脆弱性が存在します。 CVE-2011-5276 53183 CVE-2011-5276 11530 6.5 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-005307.html 2011-04-30 2014-03-25 View