Open Internet by MindsNet

Cross-Tenant IDOR Vulnerability in SolusVM WHMCS Module

A security vulnerability exists in the SolusVM WHMCS module, allowing an attacker to overwrite critical parameters and act on another customer's VM. This issue arises from the use of an attacker-controlled GET parameter as an array key. Affected deployments include all WHMCS installations using the SolusVM 1 module.

Computing & Technology, Computer Science, Programming Languages