WHMCompleteSolution 'cart.php' Local File Disclosure Vulnerability

Bugtraq ID:	50280
Class:	Input Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Oct 19 2011 12:00AM
Updated:	Oct 19 2011 12:00AM
Credit:	Lagripe-Dz and Mca-Crb
Vulnerable:	WHMCS WHMCS 3.7.1 WHMCS WHMCS 4.2 WHMCS WHMCS 0
Not Vulnerable:	WHMCS WHMCompleteSolution 4.5

WHMCompleteSolution 'cart.php' Local File Disclosure Vulnerability

WHMCompleteSolution is prone to a local file-disclosure vulnerability because it fails to adequately validate user-supplied input.

Exploiting this vulnerability would allow an attacker to obtain potentially sensitive information from local files on computers running the vulnerable application. This may aid in further attacks.

Versions prior to WHMCompleteSolution 4.5 are vulnerable.

WHMCompleteSolution 'cart.php' Local File Disclosure Vulnerability

Attackers may exploit this issue through a browser.

The following example URI is available:

http://www.example.com/[PATH]/cart.php?a=[wrong_value]&templatefile=[LFD]%00

WHMCompleteSolution 'cart.php' Local File Disclosure Vulnerability

Solution:
The vendor has released updates. Please see the references for details.

WHMCompleteSolution 'cart.php' Local File Disclosure Vulnerability

References:

• WHMCompleteSolution Homepage (WHMCS)
  
• 4.X Security Patch (WHMCS)