Security Advisory
CVE-2011-4813
CVE vulnerability detail — eXtreme Datacenter Security Operations
Description
Directory traversal vulnerability in clientarea.php in WHMCompleteSolution (WHMCS) 3.x.x allows remote attackers to read arbitrary files via an invalid action and a ../ (dot dot slash) in the templatefile parameter.