CVE

Id
63483  
CVE No.
CVE-2013-3536  
Status
Candidate  
Description
SQL injection vulnerability in the gp_LoadUserFromHash function in functions_hash.php in the Group Pay module 1.5 and earlier for WHMCS allows remote attackers to execute arbitrary SQL commands via the hash parameter.  
Phase
Assigned (20130513)  
Votes
None (candidate not yet proposed)  
Comments