CVE-2013-3536

CVE-2013-3536 describes a SQL injection vulnerability in the Group Pay module (WHMCS) gp_LoadUserFromHash in functions_hash.php for version 1.5 and earlier. The issue allows remote attackers to execute arbitrary SQL commands through the hash parameter, potentially impacting confidentiality, integ...

CVE-2013-3536: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the gpLoadUserFromHash function in functionshash.php in the Group Pay module 1.5 and earlier for WHMCS allows remote attackers to execute arbitrary SQL commands via the hash parameter...