CVE-2011-3195 - CVE House
Back to Database
Status published Medium CVE-2011-3195

shared/inc/sql/lists.php in Domain Technologie Control (DTC) before 0.34.1 allows remote...

Vulnerability Description

shared/inc/sql/lists.php in Domain Technologie Control (DTC) before 0.34.1 allows remote authenticated users to execute arbitrary commands via shell metacharacters in mailing list tunable options.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2011-3195

Credits & Attribution

No credits recorded in the NVD database.

References

More from gplhost

View All →
CVE-2011-5276
SQL injection vulnerability in the drawAdminTools_PackageInstaller function in shared/inc/forms/packager.php in...
Medium 6.5
CVE-2011-5275
The install script in Domain Technologie Control (DTC) before 0.34.1...
High 7.5
CVE-2011-5274
The drawAdminTools_PackageInstaller function in shared/inc/forms/packager.php in Domain Technologie Control (DTC)...
High 7.5
CVE-2011-5273
Directory traversal vulnerability in shared/package-installer in Domain Technologie Control (DTC)...
Medium 6.5
CVE-2011-5272
SQL injection vulnerability in Domain Technologie Control (DTC) before 0.34.1...
Medium 6.5

Affected Vendor

Affected Software

domain technologie control
Vulnerable Versions:
0, 0.24.6, 0.25.1, 0.25.2, 0.25.3, 0.26.7, 0.26.8, 0.26.9, 0.27.3, 0.28.2, 0.28.3, 0.28.4, 0.28.6, 0.28.9, 0.28.10, 0.29.1, 0.29.6, 0.29.8, 0.29.10, 0.29.14, 0.29.15, 0.29.16, 0.29.17, 0.30.6, 0.30.8, 0.30.10, 0.30.18, 0.30.20, 0.32.1, 0.32.2, 0.32.3, 0.32.4, 0.32.5, 0.32.6, 0.32.7

Timeline

Official Publish: March 20th, 2014
Last Modified: August 6th, 2024
Added to House: July 19th, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.