NVD

Id
9881  
Name
CVE-2011-3197  
Description
SQL injection vulnerability in Domain Technologie Control (DTC) before 0.34.1 allows remote authenticated users to execute arbitrary SQL commands via the addrlink parameter to shared/inc/forms/domain_info.php. NOTE: CVE-2011-3197 has been SPLIT due to findings by different researchers. CVE-2011-5272 has been assigned for the vps_note parameter to dtcadmin/logPushlet.php vector.  
Reject
 
CVSS Version
2  
CVSS Score
6.5  
Severity
Medium  
CVSS Base Score
6.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8  
CVSS Vector
(AV:N/AC:L/Au:S/C:P/I:P/A:P)  
Pub Date
2017-01-07  
Published
2014-03-21  
Modified Date
2014-03-27  
Seq
2011-3197  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
56725 9881 CVE-2011-3197 http://git.gplhost.com/gitweb/?p=dtc.git;a=blob;f=debian/changelog;hb=3eb6ef5cea6c571aae5e49e1930de778eca280c3  View
56726 9881 CVE-2011-3197 DSA-2365  View
56727 9881 CVE-2011-3197 [oss-security] 20110813 Re: CVE request: multiple vulnerabilities in dtc  View
56728 9881 CVE-2011-3197 [oss-security] 20110824 Re: Re: CVE request: multiple vulnerabilities in dtc  View
56729 9881 CVE-2011-3197 https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=637487  View
56730 9881 CVE-2011-3197 https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=637498  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
35058 JVNDB-2011-005300 Domain Technologie Control における SQL インジェクションの脆弱性 Domain Technologie Control (DTC) には、SQL インジェクションの脆弱性が存在します。 CVE-2011-3197 51104 CVE-2011-3197 9881 6.5 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-005300.html 2011-08-12 2014-03-25 View