PT-2013-4466

Name of the Vulnerable Software and Affected Versions WHMCS Group Pay module versions 1.5 and earlier Description The issue allows remote attackers to execute arbitrary SQL commands via the hash parameter in the gp LoadUserFromHash function in functions hash.php. Recommendations For WHMCS Group P...