Approved changes feed: RSS · Atom

cpe:2.3:a:whmcs:whmcompletesolution:4.3.1:*:*:*:*:*:*:*

part: a version: 4.3.1 update: *

VendorWhmcs (f2bfbe29-ac34-59a4-b4c0-6510553c98fc)
ProductWhmcompletesolution (5deac94b-9698-5993-8b84-3ed57bf6cafe)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2011-5061 vulnerable 2026-06-08 04:59:34.361539 Details available
functions.php in WHMCompleteSolution (WHMCS) 4.0.x through 5.0.x allows remote attackers to trigger arbitrary code execution in the Smarty templating system by submitting a crafted ticket, related to improper handling of characters in the subject field.
Published: 2012-01-14T02:00:00.000Z
Updated: 2024-09-16T21:56:43.364Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-4810 vulnerable 2026-06-08 04:59:33.085942 Details available
Multiple directory traversal vulnerabilities in WHMCompleteSolution (WHMCS) 3.x and 4.x allow remote attackers to read arbitrary files via the templatefile parameter to (1) submitticket.php and (2) downloads.php, and (3) the report parameter to admin/reports.php.
Published: 2011-12-14T00:00:00.000Z
Updated: 2024-09-16T18:24:44.642Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.