229 matches found
WHMCS 5 Multiple CSRF (Add Admin) / XSS Vulnerability
Exploit for php platform in category web applications Title: WHMCS 5 Multiple CSRF Add Admin and XSS Vulnerability Version: Latest version 5.1 and other previous version maybe vulnerable Vendor: www.whmcs.com Date: 2012-05-30 Tested on: win/linux Author/Found by: Shadman Tanjim Email:...
WHMCS 5 Cross Site Request Forgery / Cross Site Scripting
Title: WHMCS 5 Multiple CSRF Add Admin and XSS Vulnerability Version: Latest version 5.1 and other previous version maybe vulnerable Vendor: www.whmcs.com Date: 2012-05-30 Tested on: win/linux Author/Found by: Shadman Tanjim Email: [email protected] Greetz: Sayem Islam, Shahee Mirza, JingoBD,...
WHMCompleteSolution (WHMCS) - boleto_bb.php SQL Injection
WHMCompleteSolution WHMCS - boletobb.php SQL Injection source: https://www.securityfocus.com/bid/53711/info WHMCS WHM Complete Solution is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue...
WHMCS 4.2 File Disclosure
Local file disclosure vulnerability in WHMCS cart.php Vulnerability Type: File Disclosure For the exploit source code contact DSquare Security sales team...
WHMCS 4.x LFI
Local file include vulnerability in WHMCS Vulnerability Type: Local File Include For the exploit source code contact DSquare Security sales team...
WHMCS Simple Scanner (submitticket.php) Based [CVE-2012-0693]
Exploit for php platform in category web applications !/bin/bash BETA 0.01 clear cont=0 total=$1 total2=expr $total \ 10 PAGES=echo $total2| sed 's/.$//' dork=$2 seconds=$3 $ -eq 0 && echo "Usage: $0 $1 example: 10 submitticket.php 0 "; exit 1; function scan echo "" grep -o 'http://^".php'...
CVE-2012-0693
submitticket.php in WHMCompleteSolution WHMCS 5.03 allows remote attackers to inject arbitrary code into a subject field via crafted ticket data, a different vulnerability than CVE-2011-5061. NOTE: the vendor disputes this issue, noting that some of the details overlap CVE-2011-5061, but that it...
CVE-2011-5061
functions.php in WHMCompleteSolution WHMCS 4.0.x through 5.0.x allows remote attackers to trigger arbitrary code execution in the Smarty templating system by submitting a crafted ticket, related to improper handling of characters in the subject field...
CVE-2012-0693
WHMCS/WHMCompleteSolution 5.03 is affected by CVE-2012-0693: submitticket.php allows remote attackers to inject code into the ticket subject via crafted data, due to improper handling of characters in the subject field. This is a separate issue from CVE-2011-5061. The vendor notes overlap with CV...
CVE-2011-5061
functions.php in WHMCompleteSolution WHMCS 4.0.x through 5.0.x allows remote attackers to trigger arbitrary code execution in the Smarty templating system by submitting a crafted ticket, related to improper handling of characters in the subject field...
CVE-2011-5061
CVE-2011-5061 affects WHMCS (WHMCompleteSolution) 4.0.x–5.0.x. The vulnerability lies in functions.php allowing remote attackers to trigger arbitrary code execution in the Smarty templating system by submitting a crafted ticket with weaponized subject data, due to improper handling of characters....
PT-2012-2039 · Whmcs · Whmcs
Name of the Vulnerable Software and Affected Versions: WHMCS versions 4.0.x through 5.0.x Description: The issue is related to improper handling of characters in the subject field of a crafted ticket, which can trigger arbitrary code execution in the Smarty templating system. This allows remote...
WHMCS (cart.php) local file disclosure flaws and fixes-vulnerability warning-the black bar safety net
Author: R-t33n Product: WHMCS Developer: http://whmcs.com/ Affected version: 4. x. x Defect type: Remote , webapps Test platform windows 2 0 0 3 , Linux , ubuntu. ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ http://www.badguest.cn/ PATH /cart. php? a=wrong...
CVE-2011-4813
Directory traversal vulnerability in clientarea.php in WHMCompleteSolution WHMCS 3.x.x allows remote attackers to read arbitrary files via an invalid action and a ../ dot dot slash in the templatefile parameter...
CVE-2011-4810
Multiple directory traversal vulnerabilities in WHMCompleteSolution WHMCS 3.x and 4.x allow remote attackers to read arbitrary files via the templatefile parameter to 1 submitticket.php and 2 downloads.php, and 3 the report parameter to admin/reports.php...
Directory traversal
Multiple directory traversal vulnerabilities in WHMCompleteSolution WHMCS 3.x and 4.x allow remote attackers to read arbitrary files via the templatefile parameter to 1 submitticket.php and 2 downloads.php, and 3 the report parameter to admin/reports.php...
CVE-2011-4810
CVE-2011-4810 describes multiple directory traversal vulnerabilities in WHMCompleteSolution (WHMCS) 3.x and 4.x. The issue allows remote attackers to read arbitrary files via the templatefile parameter to (1) submitticket.php, (2) downloads.php, and via the report parameter to admin/reports.php. ...
CVE-2011-4810
Multiple directory traversal vulnerabilities in WHMCompleteSolution WHMCS 3.x and 4.x allow remote attackers to read arbitrary files via the templatefile parameter to 1 submitticket.php and 2 downloads.php, and 3 the report parameter to admin/reports.php...
CVE-2011-4813
CVE-2011-4813 affects WHMCompleteSolution (WHMCS) 3.x.x. The vulnerability is a directory traversal in clientarea.php, exploitable via an invalid action and a ../ in the templatefile parameter, allowing read of arbitrary files. The connected sources confirm the affected software and the root caus...