What’s Vulnerable › Vulnerabilities

CVE-2017-6513

• Severity: critical (CVSS 9.9 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2017-03-11 · updated 2026-06-17
• Weakness: CWE-275

Description

The WHMCS Reseller Module V2 2.0.2 in Softaculous Virtualizor before 2.9.1.0 does not verify the user correctly, which allows remote authenticated users to control other virtual machines managed by Virtualizor by accessing a modified URL.

Affected products

• softaculous Whmcs Reseller Module: 2.0.2

References

• http://www.virtualizor.com/blog/?p=1551
• https://gist.github.com/sedrubal/a83fa22f1091025a5c1a14aabd711ad7
• http://www.virtualizor.com/blog/?p=1551
• https://gist.github.com/sedrubal/a83fa22f1091025a5c1a14aabd711ad7

Get alerted when CVE-2017-6513 or the next vulnerability affects your stack