CVE-2011-3197 - CVE House
Back to Database
Status published Medium CVE-2011-3197

SQL injection vulnerability in Domain Technologie Control (DTC) before 0.34.1...

Vulnerability Description

SQL injection vulnerability in Domain Technologie Control (DTC) before 0.34.1 allows remote authenticated users to execute arbitrary SQL commands via the addrlink parameter to shared/inc/forms/domain_info.php. NOTE: CVE-2011-3197 has been SPLIT due to findings by different researchers. CVE-2011-5272 has been assigned for the vps_note parameter to dtcadmin/logPushlet.php vector.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2011-3197

Credits & Attribution

No credits recorded in the NVD database.

References

More from gplhost

View All →
CVE-2011-5276
SQL injection vulnerability in the drawAdminTools_PackageInstaller function in shared/inc/forms/packager.php in...
Medium 6.5
CVE-2011-5275
The install script in Domain Technologie Control (DTC) before 0.34.1...
High 7.5
CVE-2011-5274
The drawAdminTools_PackageInstaller function in shared/inc/forms/packager.php in Domain Technologie Control (DTC)...
High 7.5
CVE-2011-5273
Directory traversal vulnerability in shared/package-installer in Domain Technologie Control (DTC)...
Medium 6.5
CVE-2011-5272
SQL injection vulnerability in Domain Technologie Control (DTC) before 0.34.1...
Medium 6.5

Affected Vendor

Affected Software

domain technologie control
Vulnerable Versions:
0, 0.24.6, 0.25.1, 0.25.2, 0.25.3, 0.26.7, 0.26.8, 0.26.9, 0.27.3, 0.28.2, 0.28.3, 0.28.4, 0.28.6, 0.28.9, 0.28.10, 0.29.1, 0.29.6, 0.29.8, 0.29.10, 0.29.14, 0.29.15, 0.29.16, 0.29.17, 0.30.6, 0.30.8, 0.30.10, 0.30.18, 0.30.20, 0.32.1, 0.32.2, 0.32.3, 0.32.4, 0.32.5, 0.32.6, 0.32.7

Timeline

Official Publish: March 20th, 2014
Last Modified: August 6th, 2024
Added to House: July 19th, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.