WHMCS Security Exploit+Patch

[downote]

The vulnerable code is located under cart.php which contains:

    if ( $a == "add" )
    {
       $templatefile = "configureproductdomain";
        ....etc
    }

    if ( $a == "login" )
    {
        $templatefile = "login";
        ....etc
    }
     ...
    outputClientArea( $templatefile, $nowrapper );
    # outputClientArea function will display
    "./templates/orderforms/cart/{$templatefile}.tpl"

downote Reviewed by downote on 4th Dec 2011. WHMCS Security Exploit+Patch Patch Your WHMCS Before you are HACKED! Courtesy Rating: 5