PatchTheCVEwhmcompletesolution vulnerabilities and fixes
Recent CVEs affecting whmcompletesolution, with upgrade or downgrade steps. 6 tracked.
whmcompletesolution has 6 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 1. Most recent: 2012-01-14. Highest priority: CVE-2011-5061 (score 47/100).
- CVE-2012-0693 MEDIUM 5.0 DOWNGRADE submitticket.php in WHMCompleteSolution (WHMCS) 5.03 allows remote attackers to inject arbitrary code into a s
- CVE-2011-5061 HIGH 7.5 DOWNGRADE functions.php in WHMCompleteSolution (WHMCS) 4.0.x through 5.0.x allows remote attackers to trigger arbitrary
- CVE-2011-4813 MEDIUM 5.0 DOWNGRADE Directory traversal vulnerability in clientarea.php in WHMCompleteSolution (WHMCS) 3.x.x allows remote attacke
- CVE-2011-4810 MEDIUM 5.0 DOWNGRADE Multiple directory traversal vulnerabilities in WHMCompleteSolution (WHMCS) 3.x and 4.x allow remote attackers
- CVE-2006-0652 MEDIUM 6.5 DOWNGRADE WHMCompleteSolution (WHMCS) before 2.3 assigns incorrect permissions to "resellers", which allows remote authe
- CVE-2005-4235 MEDIUM 4.3 UPGRADE Cross-site scripting (XSS) vulnerability in knowledgebase.php in WHMCompleteSolution 2.1 and earlier allows re
FAQ
How do I fix whmcompletesolution vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is whmcompletesolution being exploited right now?
None of the tracked whmcompletesolution CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which whmcompletesolution CVE should I patch first?
CVE-2011-5061 currently ranks highest (47/100): functions.php in WHMCompleteSolution (WHMCS) 4.0.x through 5.0.x allows remote attackers to trigger arbitrary .