CVE-2011-4813

2011-12-1400:00:00

mitre

www.cve.org

whmcompletesolution

directory traversal

remote attackers

arbitrary files

templatefile parameter

AI Score

6.7

Confidence

Low

EPSS

0.004

Percentile

75.2%

JSON

Directory traversal vulnerability in clientarea.php in WHMCompleteSolution (WHMCS) 3.x.x allows remote attackers to read arbitrary files via an invalid action and a …/ (dot dot slash) in the templatefile parameter.

References

www.exploit-db.com/exploits/18081