| Package | Affected versions | Patched versions |
|---|---|---|
| domain technologie control | = 0.24.6= 0.25.1= 0.25.2= 0.25.3= 0.26.7= 0.26.8= 0.26.9= 0.27.3= 0.28.10= 0.28.2= 0.28.3= 0.28.4= 0.28.6= 0.28.9= 0.29.1= 0.29.10= 0.29.14= 0.29.15= 0.29.16= 0.29.17= 0.29.6= 0.29.8= 0.30.10= 0.30.18= 0.30.20= 0.30.6= 0.30.8= 0.32.1= 0.32.2= 0.32.3= 0.32.4= 0.32.5= 0.32.6≤ 0.32.7 |
The drawAdminTools_PackageInstaller function in shared/inc/forms/packager.php in Domain Technologie Control (DTC) before 0.32.11 allows remote attackers to execute arbitrary commands via shell metacharacters in the dtcpkg_directory parameter in a do_install action to dtc/.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free