SQL injection vulnerability in client/new_account.php in Domain Technologie Control (DTC) before 0.29.16 allows remote attackers to execute arbitrary SQL commands via the (1) familyname, (2) christname, (3) company_name, (4) is_company, (5) email, (6) phone, (7) fax, (8) addr1, (9) addr2, (10) addr3, (11) zipcode, (12) city, (13) state, (14) country, and (15) vat_num parameters.
References
History
No history.
MITRE Information
Status: PUBLISHED
Assigner: mitre
Published: 2009-02-03T19:00:00
Updated: 2017-08-07T12:57:01
Reserved: 2009-02-03T00:00:00
Link: CVE-2009-0402
JSON object: View
NVD Information
Status : Modified
Published: 2009-02-03T19:30:00.420
Modified: 2023-11-07T02:03:38.350
Link: CVE-2009-0402
JSON object: View
Redhat Information
No data.
CWE