Path Traversal in Gplhost Domain Technologie Control
CVE-2011-5273
Directory traversal vulnerability in shared/package-installer in Domain Technologie Control (DTC) before 0.34.1 allows remote authenticated users to execute arbitrary PHP code via a .. (dot dot) in the pkg parameter in a do_install action to dtc/.
Vulnerability class: Path Traversal (Directory Traversal)
EPSS: 0.015 (71.3th percentile) — read the EPSS interpretation.
Affected products
- Gplhost Domain_technologie_control — versions 0.24.6, 0.25.1, 0.25.2
- N/a — versions n/a
Weakness classification (CWE)
References
- cve@mitre.org (x_refsource_CONFIRM)
- cve@mitre.org (vendor-advisory, x_refsource_DEBIAN)
- cve@mitre.org (x_refsource_CONFIRM)