CVE-2011-3197
SQL injection vulnerability in Domain Technologie Control (DTC) before 0.34.1 allows remote...
CVE-2011-3197 is a medium vulnerability (CVSS 6.5) in Gplhost Domain Technologie Control, published December 18, 2011. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.17%, the 67th percentile. No source names a fixed version.
- Severity
- 6.5 MediumCVSS 2.0, NVD
- Exploit chance
- 1.17%EPSS, 67th percentile
- Exploitation
- None knownNot on CISA’s or ENISA’s lists
- Fixed in
- No fix listedNo source names one
Description
SQL injection vulnerability in Domain Technologie Control (DTC) before 0.34.1 allows remote authenticated users to execute arbitrary SQL commands via the addrlink parameter to shared/inc/forms/domain_info.php. NOTE: CVE-2011-3197 has been SPLIT due to findings by different researchers. CVE-2011-5272 has been assigned for the vps_note parameter to dtcadmin/logPushlet.php vector.
Exploit likelihood
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
dtcDebian:5.0 From an advisory covering 5 CVEs | before 0.29.18-1+lenny2, plus listed versions 0.29.17-10.29.17-1+lenny1 | 0.29.18-1+lenny2 |
What each source reports
NVD Score used
SQL injection vulnerability in Domain Technologie Control (DTC) before 0.34.1 allows remote authenticated users to execute arbitrary SQL commands via the addrlink parameter to shared/inc/forms/domain_info.php. NOTE: CVE-2011-3197 has been SPLIT due to findings by different researchers. CVE-2011-5272 has been assigned for the vps_note parameter to dtcadmin/logPushlet.php vector.
- Record
CVE-2011-3197- CVSS 2.0
- 6.5 Medium
AV:N/AC:L/Au:S/C:P/I:P/A:P - Weakness
- CWE-89
- Updated
- 2026-11-02
CVE ListNo score
SQL injection vulnerability in Domain Technologie Control (DTC) before 0.34.1 allows remote authenticated users to execute arbitrary SQL commands via the addrlink parameter to shared/inc/forms/domain_info.php. NOTE: CVE-2011-3197 has been SPLIT due to findings by different researchers. CVE-2011-5272 has been assigned for the vps_note parameter to dtcadmin/logPushlet.php vector.
- Record
CVE-2011-3197- Updated
- 2026-11-02
EUVDEUVD-2011-3161No score
SQL injection vulnerability in Domain Technologie Control (DTC) before 0.34.1 allows remote authenticated users to execute arbitrary SQL commands via the addrlink parameter to shared/inc/forms/domain_info.php. NOTE: CVE-2011-3197 has been SPLIT due to findings by different researchers. CVE-2011-5272 has been assigned for the vps_note parameter to dtcadmin/logPushlet.php vector.
- Record
EUVD-2011-3161- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-gf86-j8mh-wpxqNo score
SQL injection vulnerability in Domain Technologie Control (DTC) before 0.34.1 allows remote...
SQL injection vulnerability in Domain Technologie Control (DTC) before 0.34.1 allows remote authenticated users to execute arbitrary SQL commands via the addrlink parameter to shared/inc/forms/domain_info.php. NOTE: CVE-2011-3197 has been SPLIT due to findings by different researchers. CVE-2011-5272 has been assigned for the vps_note parameter to dtcadmin/logPushlet.php vector.
- Record
GHSA-gf86-j8mh-wpxq- Weakness
- CWE-89
- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
References
bugs.debian.org/cgi-bin/bugreport.cgi?bug=637487
openwall.com/lists/oss-security/2011/08/13/1
debian.org/security/2011/dsa-2365
git.gplhost.com/gitweb?p=dtc.git%3Ba=blob%3Bf=debian/changelog%3Bhb=3eb6ef5cea6c571aae5e49e1930de778eca280c3
nvd.nist.gov/vuln/detail/CVE-2011-3197
github.com/advisories/GHSA-gf86-j8mh-wpxq