Lucene search

K
nvd[email protected]NVD:CVE-2011-5061
HistoryJan 14, 2012 - 3:57 a.m.

CVE-2011-5061

2012-01-1403:57:27
CWE-94
web.nvd.nist.gov

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

7.3 High

AI Score

Confidence

Low

0.011 Low

EPSS

Percentile

84.8%

functions.php in WHMCompleteSolution (WHMCS) 4.0.x through 5.0.x allows remote attackers to trigger arbitrary code execution in the Smarty templating system by submitting a crafted ticket, related to improper handling of characters in the subject field.

Affected configurations

NVD
Node
whmcswhmcompletesolutionMatch4.0.0
OR
whmcswhmcompletesolutionMatch4.0.1
OR
whmcswhmcompletesolutionMatch4.0.2
OR
whmcswhmcompletesolutionMatch4.1.0
OR
whmcswhmcompletesolutionMatch4.1.1
OR
whmcswhmcompletesolutionMatch4.1.2
OR
whmcswhmcompletesolutionMatch4.2.0
OR
whmcswhmcompletesolutionMatch4.2.0beta_r1
OR
whmcswhmcompletesolutionMatch4.2.0beta_r2
OR
whmcswhmcompletesolutionMatch4.2.0beta_r3
OR
whmcswhmcompletesolutionMatch4.2.1
OR
whmcswhmcompletesolutionMatch4.3.0
OR
whmcswhmcompletesolutionMatch4.3.1
OR
whmcswhmcompletesolutionMatch4.4.0
OR
whmcswhmcompletesolutionMatch4.4.1
OR
whmcswhmcompletesolutionMatch4.4.2
OR
whmcswhmcompletesolutionMatch4.5.0
OR
whmcswhmcompletesolutionMatch4.5.1
OR
whmcswhmcompletesolutionMatch4.5.2
OR
whmcswhmcompletesolutionMatch5.0.0
OR
whmcswhmcompletesolutionMatch5.0.1
OR
whmcswhmcompletesolutionMatch5.0.2
OR
whmcswhmcompletesolutionMatch5.0.3

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

7.3 High

AI Score

Confidence

Low

0.011 Low

EPSS

Percentile

84.8%

Related for NVD:CVE-2011-5061