CVE-2011-5061

2022-10-0316:15:12

mitre

www.cve.org

whmcs

remote code execution

crafted ticket

vulnerability

improper handling

7.3 High

AI Score

Confidence

Low

0.011 Low

EPSS

Percentile

84.8%

JSON

functions.php in WHMCompleteSolution (WHMCS) 4.0.x through 5.0.x allows remote attackers to trigger arbitrary code execution in the Smarty templating system by submitting a crafted ticket, related to improper handling of characters in the subject field.