CVE-2011-5061 functions.php in WHMCompleteSolution (WHMCS) 4.0.x through 5.0.x allows remote attackers to trigger arbitrary code execution in the Smarty templating system by submitting a crafted ticket, related to....
HighCVSS 7.5
EPSS 2.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
functions.php in WHMCompleteSolution (WHMCS) 4.0.x through 5.0.x allows remote attackers to trigger arbitrary code execution in the Smarty templating system by submitting a crafted ticket, related to improper handling of characters in the subject field.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| whmcs whmcompletesolution | = 4.0.0 | No fix listed |
| whmcs whmcompletesolution | = 4.0.1 | No fix listed |
| whmcs whmcompletesolution | = 4.0.2 | No fix listed |
| whmcs whmcompletesolution | = 4.1.0 | No fix listed |
| whmcs whmcompletesolution | = 4.1.1 | No fix listed |
| whmcs whmcompletesolution | = 4.1.2 | No fix listed |
| whmcs whmcompletesolution | = 4.2.0 | No fix listed |
| whmcs whmcompletesolution | = 4.2.0-beta_r1 | No fix listed |
| whmcs whmcompletesolution | = 4.2.0-beta_r2 | No fix listed |
| whmcs whmcompletesolution | = 4.2.0-beta_r3 | No fix listed |
| whmcs whmcompletesolution | = 4.2.1 | No fix listed |
| whmcs whmcompletesolution | = 4.3.0 | No fix listed |
| whmcs whmcompletesolution | = 4.3.1 | No fix listed |
| whmcs whmcompletesolution | = 4.4.0 | No fix listed |
| whmcs whmcompletesolution | = 4.4.1 | No fix listed |
| whmcs whmcompletesolution | = 4.4.2 | No fix listed |
| whmcs whmcompletesolution | = 4.5.0 | No fix listed |
| whmcs whmcompletesolution | = 4.5.1 | No fix listed |
| whmcs whmcompletesolution | = 4.5.2 | No fix listed |
| whmcs whmcompletesolution | = 5.0.0 | No fix listed |
| whmcs whmcompletesolution | = 5.0.1 | No fix listed |
| whmcs whmcompletesolution | = 5.0.2 | No fix listed |
| whmcs whmcompletesolution | = 5.0.3 | No fix listed |
References
- forum.whmcs.com patch vendor-advisory
- www.webhostingtalk.com