Sql injection

SQL injection vulnerability in the gpLoadUserFromHash function in functionshash.php in the Group Pay module 1.5 and earlier for WHMCS allows remote attackers to execute arbitrary SQL commands via the hash parameter...

CVE-2013-3536

SQL injection vulnerability in the gpLoadUserFromHash function in functionshash.php in the Group Pay module 1.5 and earlier for WHMCS allows remote attackers to execute arbitrary SQL commands via the hash parameter...

CVE-2013-3536

CVE-2013-3536 describes a SQL injection vulnerability in the Group Pay module (WHMCS) gp_LoadUserFromHash in functions_hash.php for version 1.5 and earlier. The issue allows remote attackers to execute arbitrary SQL commands through the hash parameter, potentially impacting confidentiality, integ...

WHMCompleteSolution (WHMCS) Group Pay Plugin 1.5 - grouppay.php?hash SQL Injection

WHMCompleteSolution WHMCS Group Pay Plugin 1.5 - grouppay.php?hash SQL Injection Tile: WHMCS grouppay plugin SQL Injection = 1.5 Author: HJauditing Employee Tim E-mail: [email protected] Web: http://hjauditing.com/ Plugin:...

WHMCompleteSolution (WHMCS) Group Pay Plugin 1.5 - 'grouppay.php?hash' SQL Injection

Tile: WHMCS grouppay plugin SQL Injection = 1.5 Author: HJauditing Employee Tim E-mail: [email protected] Web: http://hjauditing.com/ Plugin: http://kadeo.com.au/design-and-development/whmcs-dev/whmcs-modules/72-group-pay.html ============ Introduction ============ We have found a SQL injection...

WHMCS Group Pay Plugin 1.5 (grouppay.php, hash param) - SQL Injection

We have found a SQL injection inside the group pay plugin for WHCMS. A lot of game hosting companies are using this plugin. SQL Injection is in the function gpLoadUserFromHash. Exploits ============ - SQL Injection grouppay.php?hash=%hash%' and '1'='1 ============ Code SQL Injection ============...

WHMCS Grouppay 1.5 SQL Injection

Tile: WHMCS grouppay plugin SQL Injection = 1.5 Author: HJauditing Employee Tim E-mail: [email protected] Web: http://hjauditing.com/ Plugin: http://kadeo.com.au/design-and-development/whmcs-dev/whmcs-modules/72-group-pay.html ============ Introduction ============ We have found a SQL injection...

WHMCS 5.x Authentication Bypass

WHMCS 5.x versions suffers from a cookie-validation vulnerability, where sessions can be modified and authentication can be easily bypassed. Description : WHMCS 5.x Authentication Bypass Vulnerability Author : AgdScorp Contact: [email protected] Version : 5.x Link :...

WHMCS 5.x Authentication Bypass Vulnerability

WHMCS's admin-verification system modules can be bypassed thru cookie-validation due to cache2 security failures. Description : WHMCS 5.x Authentication Bypass Vulnerability Author : AgdScorp Contact: email protected Version : 5.x Link : http://www.whmcs.com/order-now/ Date : Monday, December 31,...

WHMCS 5.0 - Insecure Cookie Authentication Bypass

source: https://www.securityfocus.com/bid/57145/info WHMCS is prone to an authentication-bypass vulnerability because it fails to adequately verify user-supplied input used for cookie-based authentication. Attackers can exploit this vulnerability to gain administrative access to the affected...

WHMCS 5.0 - Insecure Cookie Authentication Bypass

WHMCS 5.0 - Insecure Cookie Authentication Bypass source: https://www.securityfocus.com/bid/57145/info WHMCS is prone to an authentication-bypass vulnerability because it fails to adequately verify user-supplied input used for cookie-based authentication. Attackers can exploit this vulnerability ...

WHMCS 5.1.3 Full Path Disclosure vulnerabilities

Exploit for php platform in category web applications This is private exploit. You can buy it at https://0day.today...

WHMCompleteSolution (WHMCS) 4.5.2 - googlecheckout.php SQL Injection

WHMCompleteSolution WHMCS 4.5.2 - googlecheckout.php SQL Injection source: https://www.securityfocus.com/bid/56173/info WHMCS WHM Complete Solution is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting...

WHMCompleteSolution (WHMCS) 4.5.2 - 'googlecheckout.php' SQL Injection

source: https://www.securityfocus.com/bid/56173/info WHMCS WHM Complete Solution is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application,...

WHMCS 4.5.2 Blind SQL Injection

/ || | \ | / | '| \ \ /\ / / | '/ \ | || | | | \ V V / | | | | / |/ \,|| // ,|| | Software : WHMCS WHMCompleteSolution Google Dork: Turn on thinking mode :P Date: 10/22/2012 Author: Starware Security Team www.Resecure.me Contact Us : [email protected] Vendor Homepage:...

WHMCS v4.5.2 Blind SQL Injection Vulnerability

WHMCS WHMCompleteSolution Affected versions: 4.5.x / || | \ | / | '| \ \ /\ / / | '/ \ | || | | | \ V V / | | | | / |/ \,|| // ,|| | Software : WHMCS WHMCompleteSolution Google Dork: Turn on thinking mode :P Date: 10/22/2012 Author: Starware Security Team www.Resecure.me Contact Us :...

WHMCompleteSolution (WHMCS) 5.0 - Cross-Site Request Forgery (Multiple Application Function)

WHMCompleteSolution WHMCS 5.0 - Cross-Site Request Forgery Multiple Application Function source: https://www.securityfocus.com/bid/53740/info WHMCS is prone to a cross-site scripting vulnerability and multiple HTML-parameter-pollution vulnerabilities because it fails to properly sanitize...

WHMCompleteSolution (WHMCS) 5.0 - KnowledgeBase.php?search Cross-Site Scripting

WHMCompleteSolution WHMCS 5.0 - KnowledgeBase.php?search Cross-Site Scripting source: https://www.securityfocus.com/bid/53740/info WHMCS is prone to a cross-site scripting vulnerability and multiple HTML-parameter-pollution vulnerabilities because it fails to properly sanitize user-supplied input...

WHMCompleteSolution (WHMCS) 5.0 - 'KnowledgeBase.php?search' Cross-Site Scripting

source: https://www.securityfocus.com/bid/53740/info WHMCS is prone to a cross-site scripting vulnerability and multiple HTML-parameter-pollution vulnerabilities because it fails to properly sanitize user-supplied input. Attacker-supplied HTML and script code would run in the context of the...

WHMCompleteSolution (WHMCS) 5.0 - Cross-Site Request Forgery (Multiple Application Function)

source: https://www.securityfocus.com/bid/53740/info WHMCS is prone to a cross-site scripting vulnerability and multiple HTML-parameter-pollution vulnerabilities because it fails to properly sanitize user-supplied input. Attacker-supplied HTML and script code would run in the context of the...