CVEvulnerability

CVE-2012-0693

5.0 MEDIUM Published 2012-01-14 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2012-01-14
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
5.0 MEDIUM — AV:N/AC:L/Au:N/C:N/I:P/A:N
Weaknesses
CWE-94

Description

submitticket.php in WHMCompleteSolution (WHMCS) 5.03 allows remote attackers to inject arbitrary code into a subject field via crafted ticket data, a different vulnerability than CVE-2011-5061. NOTE: the vendor disputes this issue, noting that some of the details overlap CVE-2011-5061, but that it "says it affects V5.0.3, and the submitticket.php file, both of which are wrong.

Affected configurations

• whmcs whmcompletesolution 5.03

Related

Weakness · CWE (1)

  • CWE-94 Improper Control of Generation of Code weakness

References