CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:S/C:P/I:P/A:P
AI Score
Confidence
Low
EPSS
Percentile
71.0%
Directory traversal vulnerability in shared/package-installer in Domain Technologie Control (DTC) before 0.34.1 allows remote authenticated users to execute arbitrary PHP code via a … (dot dot) in the pkg parameter in a do_install action to dtc/.
Vendor | Product | Version | CPE |
---|---|---|---|
gplhost | domain_technologie_control | * | cpe:2.3:a:gplhost:domain_technologie_control:*:*:*:*:*:*:*:* |
gplhost | domain_technologie_control | 0.24.6 | cpe:2.3:a:gplhost:domain_technologie_control:0.24.6:*:*:*:*:*:*:* |
gplhost | domain_technologie_control | 0.25.1 | cpe:2.3:a:gplhost:domain_technologie_control:0.25.1:*:*:*:*:*:*:* |
gplhost | domain_technologie_control | 0.25.2 | cpe:2.3:a:gplhost:domain_technologie_control:0.25.2:*:*:*:*:*:*:* |
gplhost | domain_technologie_control | 0.25.3 | cpe:2.3:a:gplhost:domain_technologie_control:0.25.3:*:*:*:*:*:*:* |
gplhost | domain_technologie_control | 0.26.7 | cpe:2.3:a:gplhost:domain_technologie_control:0.26.7:*:*:*:*:*:*:* |
gplhost | domain_technologie_control | 0.26.8 | cpe:2.3:a:gplhost:domain_technologie_control:0.26.8:*:*:*:*:*:*:* |
gplhost | domain_technologie_control | 0.26.9 | cpe:2.3:a:gplhost:domain_technologie_control:0.26.9:*:*:*:*:*:*:* |
gplhost | domain_technologie_control | 0.27.3 | cpe:2.3:a:gplhost:domain_technologie_control:0.27.3:*:*:*:*:*:*:* |
gplhost | domain_technologie_control | 0.28.2 | cpe:2.3:a:gplhost:domain_technologie_control:0.28.2:*:*:*:*:*:*:* |