CVE-2017-6513
9.9
Vector
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Exploitability: 3.1 / Impact: 6.0
Source: NVD
Description
The WHMCS Reseller Module V2 2.0.2 in Softaculous Virtualizor before 2.9.1.0 does not verify the user correctly, which allows remote authenticated users to control other virtual machines managed by Virtualizor by accessing a modified URL.
Affected (1)
Products: Softaculous: Whmcs Reseller Module
Configuration A
| Vulnerable Software | Affected Versions |
|---|---|
| Version 2.0.2 |
| Running on/with | Platform Versions |
|---|---|
Softaculous Virtualizor | Up to 2.9.0.6 |
Related CWEs
References (4)
Source: cve@mitre.org
Source: af854a3a-2127-422b-91ae-364da2661108
PatchVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Timeline
No history available yet.