What is CVE-2012-0693?

CVE-2012-0693 is a vulnerability in Whmcs Whmcompletesolution, classified under Code Injection. Published 2012-01-14.

Is CVE-2012-0693 known to be exploited?

2 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

RCE in Whmcs Whmcompletesolution

CVE-2012-0693

submitticket.php in WHMCompleteSolution (WHMCS) 5.03 allows remote attackers to inject arbitrary code into a subject field via crafted ticket data, a different vulnerability than CVE-2011-5061. NOTE: the vendor disputes this issue, noting that some of the details overlap CVE-2011-5061, but that it "says it affects V5.0.3, and the submitticket.php file, both of which are wrong.

Vulnerability class: RCE (Remote Code Execution)

EPSS: 0.010 (60.0th percentile) — read the EPSS interpretation.

Affected products

Whmcs Whmcompletesolution — versions 5.03
N/a — versions n/a

Weakness classification (CWE)

CWE-94 — Code Injection

Public proof-of-concept exploits

References

cve@mitre.org (URL Repurposed, x_refsource_MISC)
cve@mitre.org (URL Repurposed, x_refsource_MISC)

Frequently asked questions

What is CVE-2012-0693?: CVE-2012-0693 is a vulnerability in Whmcs Whmcompletesolution, classified under Code Injection. Published 2012-01-14.
Is CVE-2012-0693 known to be exploited?: 2 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.