What’s Vulnerable › Vulnerabilities

CVE-2012-0693

• Severity: medium (CVSS 5.0 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.9% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2012-01-14 · updated 2026-06-16
• Weakness: CWE-94

Description

submitticket.php in WHMCompleteSolution (WHMCS) 5.03 allows remote attackers to inject arbitrary code into a subject field via crafted ticket data, a different vulnerability than CVE-2011-5061. NOTE: the vendor disputes this issue, noting that some of the details overlap CVE-2011-5061, but that it "says it affects V5.0.3, and the submitticket.php file, both of which are wrong.

Affected products

• Whmcs Whmcompletesolution: 5.03

References

• http://www.oscommerceuniversity.com/lounge/index.php/board%2C23.0.html
• http://www.oscommerceuniversity.com/lounge/index.php/topic%2C1209.0.html
• http://www.oscommerceuniversity.com/lounge/index.php/board%2C23.0.html
• http://www.oscommerceuniversity.com/lounge/index.php/topic%2C1209.0.html

Get alerted when CVE-2012-0693 or the next vulnerability affects your stack