Whmcs

Whmcompletesolution

4 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
7.5

CVE-2011-5061

  • EPSS 1.88%
  • Veröffentlicht 14.01.2012 03:57:27
  • Zuletzt bearbeitet 11.04.2025 00:51:21

functions.php in WHMCompleteSolution (WHMCS) 4.0.x through 5.0.x allows remote attackers to trigger arbitrary code execution in the Smarty templating system by submitting a crafted ticket, related to improper handling of characters in the subject fie...

5

CVE-2012-0693

  • EPSS 0.35%
  • Veröffentlicht 14.01.2012 03:57:27
  • Zuletzt bearbeitet 11.04.2025 00:51:21

submitticket.php in WHMCompleteSolution (WHMCS) 5.03 allows remote attackers to inject arbitrary code into a subject field via crafted ticket data, a different vulnerability than CVE-2011-5061. NOTE: the vendor disputes this issue, noting that some o...

5

CVE-2011-4810

Exploit
  • EPSS 4.88%
  • Veröffentlicht 14.12.2011 00:55:19
  • Zuletzt bearbeitet 11.04.2025 00:51:21

Multiple directory traversal vulnerabilities in WHMCompleteSolution (WHMCS) 3.x and 4.x allow remote attackers to read arbitrary files via the templatefile parameter to (1) submitticket.php and (2) downloads.php, and (3) the report parameter to admin...

5

CVE-2011-4813

  • EPSS 4.88%
  • Veröffentlicht 14.12.2011 00:55:19
  • Zuletzt bearbeitet 11.04.2025 00:51:21

Directory traversal vulnerability in clientarea.php in WHMCompleteSolution (WHMCS) 3.x.x allows remote attackers to read arbitrary files via an invalid action and a ../ (dot dot slash) in the templatefile parameter.