CVEvulnerability
CVE-2017-6513
9.9 CRITICAL
Official page ↗
- Status
- Modified
- Published
- 2017-03-11
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 9.9 CRITICAL — CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 6.5 MEDIUM — AV:N/AC:L/Au:S/C:P/I:P/A:P
- Weaknesses
- CWE-275
Description
The WHMCS Reseller Module V2 2.0.2 in Softaculous Virtualizor before 2.9.1.0 does not verify the user correctly, which allows remote authenticated users to control other virtual machines managed by Virtualizor by accessing a modified URL.
Affected configurations
• softaculous whmcs reseller module 2.0.2
Related
Weakness · not in database (1)
References
- http://www.virtualizor.com/blog/?p=1551 Patch, Vendor Advisory
- https://gist.github.com/sedrubal/a83fa22f1091025a5c1a14aabd711ad7 gist.github.com
- http://www.virtualizor.com/blog/?p=1551 Patch, Vendor Advisory
- https://gist.github.com/sedrubal/a83fa22f1091025a5c1a14aabd711ad7 gist.github.com