WHMCS 'Admin Credit Routines' Component SQL Injection Vulnerability
BID:64591
Info
WHMCS 'Admin Credit Routines' Component SQL Injection Vulnerability
| Bugtraq ID: | 64591 |
| Class: | Input Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Dec 23 2013 12:00AM |
| Updated: | Dec 23 2013 12:00AM |
| Credit: | Unknown |
| Vulnerable: |
WHMCS WHMCS 5.2.14 |
| Not Vulnerable: |
WHMCS WHMCS 5.2.15 |
Discussion
WHMCS 'Admin Credit Routines' Component SQL Injection Vulnerability
WHMCS (WHM Complete Solution) is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied input before using it in an SQL query.
Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.
WHMCS prior to 5.2.15 are vulnerable.
WHMCS (WHM Complete Solution) is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied input before using it in an SQL query.
Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.
WHMCS prior to 5.2.15 are vulnerable.
Exploit / POC
WHMCS 'Admin Credit Routines' Component SQL Injection Vulnerability
Attackers can use a web browser to exploit this issue.
Attackers can use a web browser to exploit this issue.