CVE-2011-5273

Directory traversal vulnerability in shared/package-installer in Domain Technologie Control (DTC) before 0.34.1 allows remote authenticated users to execute…

published March 20, 2014

CVSS
—
EPSS
1%
Percentile
73.6
In the wild
Unconfirmed
What it is

Directory traversal vulnerability in shared/package-installer in Domain Technologie Control (DTC) before 0.34.1 allows remote authenticated users to execute arbitrary PHP code via a .. (dot dot) in the pkg parameter in a do_install action to dtc/.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01484 · 73.6th percentile
Published
2014-03-20T19:00Z
EPSS history
Timeline
  • 20 MAR 19:00Z
    Directory traversal vulnerability in shared/package-installer in Domain Technologie Control (DTC) before 0.34.1 allows remote authenticated users to execute…
    cvelistv5