CVE-2011-4810 Multiple directory traversal vulnerabilities in WHMCompleteSolution (WHMCS) 3.x and 4.x allow remote attackers to read arbitrary files via the templatefile parameter to (1) submitticket.php and (2) do...
MediumCVSS 5.0
EPSS 6.2%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Multiple directory traversal vulnerabilities in WHMCompleteSolution (WHMCS) 3.x and 4.x allow remote attackers to read arbitrary files via the templatefile parameter to (1) submitticket.php and (2) downloads.php, and (3) the report parameter to admin/reports.php.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| whmcs whmcompletesolution | = 3.0.0 | No fix listed |
| whmcs whmcompletesolution | = 4.0.0 | No fix listed |
| whmcs whmcompletesolution | = 4.0.1 | No fix listed |
| whmcs whmcompletesolution | = 4.0.2 | No fix listed |
| whmcs whmcompletesolution | = 4.1.0 | No fix listed |
| whmcs whmcompletesolution | = 4.1.1 | No fix listed |
| whmcs whmcompletesolution | = 4.1.2 | No fix listed |
| whmcs whmcompletesolution | = 4.2.0 | No fix listed |
| whmcs whmcompletesolution | = 4.2.0-beta_r1 | No fix listed |
| whmcs whmcompletesolution | = 4.2.0-beta_r2 | No fix listed |
| whmcs whmcompletesolution | = 4.2.0-beta_r3 | No fix listed |
| whmcs whmcompletesolution | = 4.2.1 | No fix listed |
| whmcs whmcompletesolution | = 4.3.0 | No fix listed |
| whmcs whmcompletesolution | = 4.3.1 | No fix listed |
| whmcs whmcompletesolution | = 4.4.0 | No fix listed |
| whmcs whmcompletesolution | = 4.4.1 | No fix listed |
| whmcs whmcompletesolution | = 4.4.2 | No fix listed |
| whmcs whmcompletesolution | = 4.5.0 | No fix listed |
| whmcs whmcompletesolution | = 4.5.1 | No fix listed |
| whmcs whmcompletesolution | = 4.5.2 | No fix listed |
References
- 18088 exploit