CVE-2013-3536

ALTO 7.5CVE-2013-3536 · Published 13/05/2013 · updated 16/06/2026

En resumen

CVE-2013-3536 es una vulnerabilidad ALTO (CVSS 7.5) que afecta a group pay (whmcs).
Probabilidad de explotación en los próximos 30 días (EPSS): 2.2%, mayor que el 82.9% de las vulnerabilidades.
Aún no hay una versión corregida: sigue el aviso del fabricante en Referencias.

Package	Affected versions	Patched versions
group pay whmcs	`≤ 1.5`	No fix yet

Description

SQL injection vulnerability in the gp_LoadUserFromHash function in functions_hash.php in the Group Pay module 1.5 and earlier for WHMCS allows remote attackers to execute arbitrary SQL commands via the hash parameter.

References

packetstormsecurity.com/files/121046/WHMCS-Grouppay-1.5-SQL-Injection.html · Exploit
secunia.com/advisories/52804 · Vendor Advisory
exploit-db.com/exploits/24934
osvdb.org/91980

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free