medium5.0Public exploit code
CVE-2011-4813
Directory traversal vulnerability in clientarea.php in WHMCompleteSolution (WHMCS) 3.x.x allows remote attackers to read arbitrary files via an invalid action …
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- WHMCompleteSolution (WHMCS) 3.x - 'clientarea.php' Local File Disclosure2011-11-04 · webapps · php
Impact
Directory traversal vulnerability in clientarea.php in WHMCompleteSolution (WHMCS) 3.x.x allows remote attackers to read arbitrary files via an invalid action and a ../ (dot dot slash) in the templatefile parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Whmcs | Whmcompletesolution | Version 3.0.0 |