Path Traversal in Whmcs Whmcompletesolution

CVE-2011-4813

Directory traversal vulnerability in clientarea.php in WHMCompleteSolution (WHMCS) 3.x.x allows remote attackers to read arbitrary files via an invalid action and a ../ (dot dot slash) in the templatefile parameter.

Vulnerability class: Path Traversal (Directory Traversal)

EPSS: 0.033 (87.2th percentile) — read the EPSS interpretation.