Vulnerability Details CVE-2013-3536
SQL injection vulnerability in the gp_LoadUserFromHash function in functions_hash.php in the Group Pay module 1.5 and earlier for WHMCS allows remote attackers to execute arbitrary SQL commands via the hash parameter.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.005
EPSS Ranking 65.4%
CVSS Severity
CVSS v2 Score 7.5
References
- http://packetstormsecurity.com/files/121046/WHMCS-Grouppay-1.5-SQL-Injection.html
- http://secunia.com/advisories/52804
- http://www.exploit-db.com/exploits/24934
- http://www.osvdb.org/91980
- http://packetstormsecurity.com/files/121046/WHMCS-Grouppay-1.5-SQL-Injection.html
- http://secunia.com/advisories/52804
- http://www.exploit-db.com/exploits/24934
- http://www.osvdb.org/91980