Multiple directory traversal vulnerabilities in WHMCompleteSolution (WHMCS) 3.x and 4.x allow remote attackers to read arbitrary files via the templatefile parameter to (1) submitticket.php and (2) downloads.php, and (3) the report parameter to admin/reports.php.
Metrics
Affected Vendors & Products
References
Link | Providers |
---|---|
http://www.exploit-db.com/exploits/18088 |
History
No history.
MITRE
Status: PUBLISHED
Assigner: mitre
Published: 2011-12-14T00:00:00Z
Updated: 2024-09-16T18:24:44.642Z
Reserved: 2011-12-13T00:00:00Z
Link: CVE-2011-4810
Vulnrichment
No data.
NVD
Status : Analyzed
Published: 2011-12-14T00:55:19.293
Modified: 2012-02-10T05:00:00.000
Link: CVE-2011-4810
Redhat
No data.