CVE-2013-3536

SQL injection vulnerability in the gp_LoadUserFromHash function in functions_hash.php in the Group Pay module 1.5 and earlier for WHMCS allows remote attackers…

published May 13, 2013

CVSS
—
EPSS
2%
Percentile
82.7
In the wild
Unconfirmed
What it is

SQL injection vulnerability in the gp_LoadUserFromHash function in functions_hash.php in the Group Pay module 1.5 and earlier for WHMCS allows remote attackers to execute arbitrary SQL commands via the hash parameter.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02237 · 82.7th percentile
Published
2013-05-13T23:00Z
EPSS history
Timeline
  • 13 MAY 23:00Z
    SQL injection vulnerability in the gp_LoadUserFromHash function in functions_hash.php in the Group Pay module 1.5 and earlier for WHMCS allows remote attackers…
    cvelistv5