CVE-2017-6513 The WHMCS Reseller Module V2 2.0.2 in Softaculous Virtualizor before 2.9.1.0 does not verify the user correctly, which allows remote authenticated users to control other virtual machines managed by Vi...
CriticalCVSS 9.9
EPSS 1.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The WHMCS Reseller Module V2 2.0.2 in Softaculous Virtualizor before 2.9.1.0 does not verify the user correctly, which allows remote authenticated users to control other virtual machines managed by Virtualizor by accessing a modified URL.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| softaculous whmcs reseller module | = 2.0.2 | No fix listed |
References
- www.virtualizor.com patch vendor-advisory
- gist.github.com