CVE-2011-4810

Multiple directory traversal vulnerabilities in WHMCompleteSolution (WHMCS) 3.x and 4.x allow remote attackers to read arbitrary files via the templatefile parameter to (1) submitticket.php and (2) downloads.php, and (3) the report parameter to admin/reports.php.

CVSS v2.0

5.0 MEDIUMAV:N/AC:L/Au:N/C:P/I:N/A:N

EPSS

6.32% chance of exploitation in the next 30 days, 93th percentile

Published

2011-12-14

Updated

2024-09-16

Proof-of-concept exploits (1)

• http://www.exploit-db.com/exploits/18088

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/18088

References

• CVE Record
• NVD entry

Related

• CVE-2011-4809
• CVE-2011-4811
• CVE-2011-4808
• CVE-2011-4812
• CVE-2011-4807
• CVE-2011-4813