CVE-2013-3536

CVE-2013-3536 describes a SQL injection vulnerability in the Group Pay module (WHMCS) gp_LoadUserFromHash in functions_hash.php for version 1.5 and earlier. The issue allows remote attackers to execute arbitrary SQL commands through the hash parameter, potentially impacting confidentiality, integ...