Read the docs
TI-2011-02825 Aliases CVE-2011-3195GHSA-jxfv-83cp-632p

shared/inc/sql/lists.php in Domain Technologie Control (DTC) before 0.34.1 allows remote…

Priority LOW 32CWE-20Published · Updated

Key facts

Attack vector
Network
Privileges required
Low
User interaction
— Not recorded in CVSS 2.0
Attack complexity
Low
Impact type
—
Confidentiality · integrity · availability
Partial · Partial · Partial
Fix status
No fix listed

Attack profile from CVSS 2.0 · NVD. Fix status from CNA.

Summary

shared/inc/sql/lists.php in Domain Technologie Control (DTC) before 0.34.1 allows remote authenticated users to execute arbitrary commands via shell metacharacters in mailing list tunable options.

Why it matters now

EPSS 0.01542 75th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
——all versions—No fix listedCNA
  • — Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 35

CPEVersionsRoleVendor
cpe:2.3:a:gplhost:domain_technologie_control:*:*:*:*:*:*:*:*up to 0.32.11VulnerableGplhost
cpe:2.3:a:gplhost:domain_technologie_control:0.24.6:*:*:*:*:*:*:*0.24.6VulnerableGplhost
cpe:2.3:a:gplhost:domain_technologie_control:0.25.1:*:*:*:*:*:*:*0.25.1VulnerableGplhost
cpe:2.3:a:gplhost:domain_technologie_control:0.25.2:*:*:*:*:*:*:*0.25.2VulnerableGplhost
cpe:2.3:a:gplhost:domain_technologie_control:0.25.3:*:*:*:*:*:*:*0.25.3VulnerableGplhost
cpe:2.3:a:gplhost:domain_technologie_control:0.26.7:*:*:*:*:*:*:*0.26.7VulnerableGplhost
cpe:2.3:a:gplhost:domain_technologie_control:0.26.8:*:*:*:*:*:*:*0.26.8VulnerableGplhost
cpe:2.3:a:gplhost:domain_technologie_control:0.26.9:*:*:*:*:*:*:*0.26.9VulnerableGplhost
cpe:2.3:a:gplhost:domain_technologie_control:0.27.3:*:*:*:*:*:*:*0.27.3VulnerableGplhost
cpe:2.3:a:gplhost:domain_technologie_control:0.28.2:*:*:*:*:*:*:*0.28.2VulnerableGplhost
  • cpe:2.3:a:gplhost:domain_technologie_control:*:*:*:*:*:*:*:* Versions up to 0.32.11 Vulnerable ·Gplhost
  • cpe:2.3:a:gplhost:domain_technologie_control:0.24.6:*:*:*:*:*:*:* Versions 0.24.6 Vulnerable ·Gplhost
  • cpe:2.3:a:gplhost:domain_technologie_control:0.25.1:*:*:*:*:*:*:* Versions 0.25.1 Vulnerable ·Gplhost
  • cpe:2.3:a:gplhost:domain_technologie_control:0.25.2:*:*:*:*:*:*:* Versions 0.25.2 Vulnerable ·Gplhost
  • cpe:2.3:a:gplhost:domain_technologie_control:0.25.3:*:*:*:*:*:*:* Versions 0.25.3 Vulnerable ·Gplhost
  • cpe:2.3:a:gplhost:domain_technologie_control:0.26.7:*:*:*:*:*:*:* Versions 0.26.7 Vulnerable ·Gplhost
  • cpe:2.3:a:gplhost:domain_technologie_control:0.26.8:*:*:*:*:*:*:* Versions 0.26.8 Vulnerable ·Gplhost
  • cpe:2.3:a:gplhost:domain_technologie_control:0.26.9:*:*:*:*:*:*:* Versions 0.26.9 Vulnerable ·Gplhost
  • cpe:2.3:a:gplhost:domain_technologie_control:0.27.3:*:*:*:*:*:*:* Versions 0.27.3 Vulnerable ·Gplhost
  • cpe:2.3:a:gplhost:domain_technologie_control:0.28.2:*:*:*:*:*:*:* Versions 0.28.2 Vulnerable ·Gplhost
Show 25 more CPE
CPEVersionsRoleVendor
cpe:2.3:a:gplhost:domain_technologie_control:0.28.3:*:*:*:*:*:*:*0.28.3VulnerableGplhost
cpe:2.3:a:gplhost:domain_technologie_control:0.28.4:*:*:*:*:*:*:*0.28.4VulnerableGplhost
cpe:2.3:a:gplhost:domain_technologie_control:0.28.6:*:*:*:*:*:*:*0.28.6VulnerableGplhost
cpe:2.3:a:gplhost:domain_technologie_control:0.28.9:*:*:*:*:*:*:*0.28.9VulnerableGplhost
cpe:2.3:a:gplhost:domain_technologie_control:0.28.10:*:*:*:*:*:*:*0.28.10VulnerableGplhost
cpe:2.3:a:gplhost:domain_technologie_control:0.29.1:*:*:*:*:*:*:*0.29.1VulnerableGplhost
cpe:2.3:a:gplhost:domain_technologie_control:0.29.6:*:*:*:*:*:*:*0.29.6VulnerableGplhost
cpe:2.3:a:gplhost:domain_technologie_control:0.29.8:*:*:*:*:*:*:*0.29.8VulnerableGplhost
cpe:2.3:a:gplhost:domain_technologie_control:0.29.10:*:*:*:*:*:*:*0.29.10VulnerableGplhost
cpe:2.3:a:gplhost:domain_technologie_control:0.29.14:*:*:*:*:*:*:*0.29.14VulnerableGplhost
cpe:2.3:a:gplhost:domain_technologie_control:0.29.15:*:*:*:*:*:*:*0.29.15VulnerableGplhost
cpe:2.3:a:gplhost:domain_technologie_control:0.29.16:*:*:*:*:*:*:*0.29.16VulnerableGplhost
cpe:2.3:a:gplhost:domain_technologie_control:0.29.17:*:*:*:*:*:*:*0.29.17VulnerableGplhost
cpe:2.3:a:gplhost:domain_technologie_control:0.30.6:*:*:*:*:*:*:*0.30.6VulnerableGplhost
cpe:2.3:a:gplhost:domain_technologie_control:0.30.8:*:*:*:*:*:*:*0.30.8VulnerableGplhost
cpe:2.3:a:gplhost:domain_technologie_control:0.30.10:*:*:*:*:*:*:*0.30.10VulnerableGplhost
cpe:2.3:a:gplhost:domain_technologie_control:0.30.18:*:*:*:*:*:*:*0.30.18VulnerableGplhost
cpe:2.3:a:gplhost:domain_technologie_control:0.30.20:*:*:*:*:*:*:*0.30.20VulnerableGplhost
cpe:2.3:a:gplhost:domain_technologie_control:0.32.1:*:*:*:*:*:*:*0.32.1VulnerableGplhost
cpe:2.3:a:gplhost:domain_technologie_control:0.32.2:*:*:*:*:*:*:*0.32.2VulnerableGplhost
cpe:2.3:a:gplhost:domain_technologie_control:0.32.3:*:*:*:*:*:*:*0.32.3VulnerableGplhost
cpe:2.3:a:gplhost:domain_technologie_control:0.32.4:*:*:*:*:*:*:*0.32.4VulnerableGplhost
cpe:2.3:a:gplhost:domain_technologie_control:0.32.5:*:*:*:*:*:*:*0.32.5VulnerableGplhost
cpe:2.3:a:gplhost:domain_technologie_control:0.32.6:*:*:*:*:*:*:*0.32.6VulnerableGplhost
cpe:2.3:a:gplhost:domain_technologie_control:0.32.7:*:*:*:*:*:*:*0.32.7VulnerableGplhost
  • cpe:2.3:a:gplhost:domain_technologie_control:0.28.3:*:*:*:*:*:*:* Versions 0.28.3 Vulnerable ·Gplhost
  • cpe:2.3:a:gplhost:domain_technologie_control:0.28.4:*:*:*:*:*:*:* Versions 0.28.4 Vulnerable ·Gplhost
  • cpe:2.3:a:gplhost:domain_technologie_control:0.28.6:*:*:*:*:*:*:* Versions 0.28.6 Vulnerable ·Gplhost
  • cpe:2.3:a:gplhost:domain_technologie_control:0.28.9:*:*:*:*:*:*:* Versions 0.28.9 Vulnerable ·Gplhost
  • cpe:2.3:a:gplhost:domain_technologie_control:0.28.10:*:*:*:*:*:*:* Versions 0.28.10 Vulnerable ·Gplhost
  • cpe:2.3:a:gplhost:domain_technologie_control:0.29.1:*:*:*:*:*:*:* Versions 0.29.1 Vulnerable ·Gplhost
  • cpe:2.3:a:gplhost:domain_technologie_control:0.29.6:*:*:*:*:*:*:* Versions 0.29.6 Vulnerable ·Gplhost
  • cpe:2.3:a:gplhost:domain_technologie_control:0.29.8:*:*:*:*:*:*:* Versions 0.29.8 Vulnerable ·Gplhost
  • cpe:2.3:a:gplhost:domain_technologie_control:0.29.10:*:*:*:*:*:*:* Versions 0.29.10 Vulnerable ·Gplhost
  • cpe:2.3:a:gplhost:domain_technologie_control:0.29.14:*:*:*:*:*:*:* Versions 0.29.14 Vulnerable ·Gplhost
  • cpe:2.3:a:gplhost:domain_technologie_control:0.29.15:*:*:*:*:*:*:* Versions 0.29.15 Vulnerable ·Gplhost
  • cpe:2.3:a:gplhost:domain_technologie_control:0.29.16:*:*:*:*:*:*:* Versions 0.29.16 Vulnerable ·Gplhost
  • cpe:2.3:a:gplhost:domain_technologie_control:0.29.17:*:*:*:*:*:*:* Versions 0.29.17 Vulnerable ·Gplhost
  • cpe:2.3:a:gplhost:domain_technologie_control:0.30.6:*:*:*:*:*:*:* Versions 0.30.6 Vulnerable ·Gplhost
  • cpe:2.3:a:gplhost:domain_technologie_control:0.30.8:*:*:*:*:*:*:* Versions 0.30.8 Vulnerable ·Gplhost
  • cpe:2.3:a:gplhost:domain_technologie_control:0.30.10:*:*:*:*:*:*:* Versions 0.30.10 Vulnerable ·Gplhost
  • cpe:2.3:a:gplhost:domain_technologie_control:0.30.18:*:*:*:*:*:*:* Versions 0.30.18 Vulnerable ·Gplhost
  • cpe:2.3:a:gplhost:domain_technologie_control:0.30.20:*:*:*:*:*:*:* Versions 0.30.20 Vulnerable ·Gplhost
  • cpe:2.3:a:gplhost:domain_technologie_control:0.32.1:*:*:*:*:*:*:* Versions 0.32.1 Vulnerable ·Gplhost
  • cpe:2.3:a:gplhost:domain_technologie_control:0.32.2:*:*:*:*:*:*:* Versions 0.32.2 Vulnerable ·Gplhost
  • cpe:2.3:a:gplhost:domain_technologie_control:0.32.3:*:*:*:*:*:*:* Versions 0.32.3 Vulnerable ·Gplhost
  • cpe:2.3:a:gplhost:domain_technologie_control:0.32.4:*:*:*:*:*:*:* Versions 0.32.4 Vulnerable ·Gplhost
  • cpe:2.3:a:gplhost:domain_technologie_control:0.32.5:*:*:*:*:*:*:* Versions 0.32.5 Vulnerable ·Gplhost
  • cpe:2.3:a:gplhost:domain_technologie_control:0.32.6:*:*:*:*:*:*:* Versions 0.32.6 Vulnerable ·Gplhost
  • cpe:2.3:a:gplhost:domain_technologie_control:0.32.7:*:*:*:*:*:*:* Versions 0.32.7 Vulnerable ·Gplhost

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2011-3195
  2. 2026-10-03 Alias added: GHSA-jxfv-83cp-632p

References

Advisory 1

Other 4

  • TI-2011-04547 The drawAdminTools_PackageInstaller function in shared/inc/forms/packager.php in Domain… CVSS 2.0HIGH 7.5
  • TI-2011-00361 Multiple SQL injection vulnerabilities in Domain Technologie Control (DTC) before 0.32.9… CVSS 2.0HIGH 7.5
  • TI-2009-00382 SQL injection vulnerability in client/new_account.php in Domain Technologie Control (DTC)… CVSS 2.0HIGH 7.5
  • TI-2011-04548 The install script in Domain Technologie Control (DTC) before 0.34.1 gives sudo… CVSS 2.0HIGH 7.5
  • TI-2011-04546 Directory traversal vulnerability in shared/package-installer in Domain Technologie… CVSS 2.0MEDIUM 6.5
  • TI-2011-04549 SQL injection vulnerability in the drawAdminTools_PackageInstaller function in… CVSS 2.0MEDIUM 6.5
See all 14 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences