PatchTheCVEgplhost vulnerabilities
Recent CVEs affecting gplhost products. 10 tracked.
gplhost has 10 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 10. Most recent: 2014-03-21. Highest priority: CVE-2011-5274 (score 47/100).
- CVE-2011-5276 MEDIUM 6.5 UPGRADE SQL injection vulnerability in the drawAdminTools_PackageInstaller function in shared/inc/forms/packager.php i
- CVE-2011-5275 HIGH 7.5 UPGRADE The install script in Domain Technologie Control (DTC) before 0.34.1 gives sudo permissions for chrootuid to t
- CVE-2011-5274 HIGH 7.5 UPGRADE The drawAdminTools_PackageInstaller function in shared/inc/forms/packager.php in Domain Technologie Control (D
- CVE-2011-5273 MEDIUM 6.5 UPGRADE Directory traversal vulnerability in shared/package-installer in Domain Technologie Control (DTC) before 0.34.
- CVE-2011-5272 MEDIUM 6.5 UPGRADE SQL injection vulnerability in Domain Technologie Control (DTC) before 0.34.1 allows remote authenticated user
- CVE-2011-3199 LOW 3.5 UPGRADE Multiple cross-site scripting (XSS) vulnerabilities in Domain Technologie Control (DTC) before 0.34.1 allow re
- CVE-2011-3198 LOW 2.1 UPGRADE Domain Technologie Control (DTC) before 0.34.1 includes a password in the -b command line argument to htpasswd
- CVE-2011-3197 MEDIUM 6.5 UPGRADE SQL injection vulnerability in Domain Technologie Control (DTC) before 0.34.1 allows remote authenticated user
- CVE-2011-3196 LOW 2.1 UPGRADE The setup script in Domain Technologie Control (DTC) before 0.34.1 uses world-readable permissions for /etc/ap
- CVE-2011-3195 MEDIUM 6.5 UPGRADE shared/inc/sql/lists.php in Domain Technologie Control (DTC) before 0.34.1 allows remote authenticated users t
FAQ
How do I fix gplhost vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is gplhost being exploited right now?
None of the tracked gplhost CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which gplhost CVE should I patch first?
CVE-2011-5274 currently ranks highest (47/100): The drawAdminTools_PackageInstaller function in shared/inc/forms/packager.php in Domain Technologie Control (D.