cve/2013/CVE-2013-3536.md
2024-06-18 02:51:15 +02:00

719 B

CVE-2013-3536

Description

SQL injection vulnerability in the gp_LoadUserFromHash function in functions_hash.php in the Group Pay module 1.5 and earlier for WHMCS allows remote attackers to execute arbitrary SQL commands via the hash parameter.

POC

Reference

Github

No PoCs found on GitHub currently.