Lucene search

K
cve[email protected]CVE-2011-5061
HistoryOct 03, 2022 - 4:15 p.m.

CVE-2011-5061

2022-10-0316:15:12
CWE-94
web.nvd.nist.gov
23
cve-2011-5061
whmcompletesolution
whmcs
remote code execution
smarty templating system
security vulnerability

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

7.6 High

AI Score

Confidence

Low

0.011 Low

EPSS

Percentile

84.8%

functions.php in WHMCompleteSolution (WHMCS) 4.0.x through 5.0.x allows remote attackers to trigger arbitrary code execution in the Smarty templating system by submitting a crafted ticket, related to improper handling of characters in the subject field.

Affected configurations

NVD
Node
whmcswhmcompletesolutionMatch4.0.0
OR
whmcswhmcompletesolutionMatch4.0.1
OR
whmcswhmcompletesolutionMatch4.0.2
OR
whmcswhmcompletesolutionMatch4.1.0
OR
whmcswhmcompletesolutionMatch4.1.1
OR
whmcswhmcompletesolutionMatch4.1.2
OR
whmcswhmcompletesolutionMatch4.2.0
OR
whmcswhmcompletesolutionMatch4.2.0beta_r1
OR
whmcswhmcompletesolutionMatch4.2.0beta_r2
OR
whmcswhmcompletesolutionMatch4.2.0beta_r3
OR
whmcswhmcompletesolutionMatch4.2.1
OR
whmcswhmcompletesolutionMatch4.3.0
OR
whmcswhmcompletesolutionMatch4.3.1
OR
whmcswhmcompletesolutionMatch4.4.0
OR
whmcswhmcompletesolutionMatch4.4.1
OR
whmcswhmcompletesolutionMatch4.4.2
OR
whmcswhmcompletesolutionMatch4.5.0
OR
whmcswhmcompletesolutionMatch4.5.1
OR
whmcswhmcompletesolutionMatch4.5.2
OR
whmcswhmcompletesolutionMatch5.0.0
OR
whmcswhmcompletesolutionMatch5.0.1
OR
whmcswhmcompletesolutionMatch5.0.2
OR
whmcswhmcompletesolutionMatch5.0.3

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

7.6 High

AI Score

Confidence

Low

0.011 Low

EPSS

Percentile

84.8%

Related for CVE-2011-5061