Description (CNA)
functions.php in WHMCompleteSolution (WHMCS) 4.0.x through 5.0.x allows remote attackers to trigger arbitrary code execution in the Smarty templating system by submitting a crafted ticket, related to improper handling of characters in the subject field.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / n/a | affected n/a |
CWE
No CWE identifiers supplied.
References
- http://forum.whmcs.com/showthread.php?t=43462
- http://www.webhostingtalk.com/showpost.php?p=7848685&postcount=35
ADP enrichment
No English description supplied.