Vulnerability in Whm Autopilot

CVE-2005-3687

cancel_account.php in WHM AutoPilot 2.5.30 and earlier allows remote attackers to cancel requests for arbitrary accounts via a modified c parameter.

EPSS: 0.010 (60.5th percentile) — read the EPSS interpretation.

Affected products

  • Whm_autopilot — versions 2.4.5, 2.4.6, 2.4.6.5
  • N/a — versions n/a

References