NetSight
high7.5

CVE-2011-5061

functions.php in WHMCompleteSolution (WHMCS) 4.0.x through 5.0.x allows remote attackers to trigger arbitrary code execution in the Smarty templating system by…

Impact

functions.php in WHMCompleteSolution (WHMCS) 4.0.x through 5.0.x allows remote attackers to trigger arbitrary code execution in the Smarty templating system by submitting a crafted ticket, related to improper handling of characters in the subject field.

Affected products

VendorProductAffected versions
WhmcsWhmcompletesolution
Versions 4.0.0, 4.0.1, 4.0.2, 4.1.0, 4.1.1, 4.1.2

Weakness classification

References