Design/Logic Flaw

2017-03-1106:59:00

PRIOn knowledge base

www.prio-n.com

8.8 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

59.2%

JSON

The WHMCS Reseller Module V2 2.0.2 in Softaculous Virtualizor before 2.9.1.0 does not verify the user correctly, which allows remote authenticated users to control other virtual machines managed by Virtualizor by accessing a modified URL.

CPENameOperatorVersion
whmcs_reseller_moduleeq2.0.2

CPE	Name	Operator	Version
	whmcs_reseller_module	eq	2.0.2

References

www.virtualizor.com/blog/?p=1551

gist.github.com/sedrubal/a83fa22f1091025a5c1a14aabd711ad7