VYPR

Whmcompletesolution

by Whmcompletesolution

CVEs (2)

  • CVE-2006-0652Feb 13, 2006
    risk 0.00cvss epss 0.01

    WHMCompleteSolution (WHMCS) before 2.3 assigns incorrect permissions to "resellers", which allows remote authenticated users to perform privileged actions or obtain sensitive information. NOTE: this report is based on a vendor bug report that identified "incorrect permissions."…

  • CVE-2005-4235Dec 14, 2005
    risk 0.00cvss epss 0.01

    Cross-site scripting (XSS) vulnerability in knowledgebase.php in WHMCompleteSolution 2.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the search parameters.