CVE-2012-0693

Name of the Vulnerable Software and Affected Versions WHMCS version 5.03

Description The issue allows remote attackers to inject arbitrary code into a subject field via crafted ticket data in the submitticket.php file. Note that the vendor disputes this issue, stating that some details overlap with another vulnerability and that the specified version and file are incorrect.

Recommendations For WHMCS version 5.03, consider restricting access to the submitticket.php file as a temporary workaround until the issue is resolved.