| Package | Affected versions | Patched versions |
|---|---|---|
| group pay | ≤ 1.5 |
SQL injection vulnerability in the gp_LoadUserFromHash function in functions_hash.php in the Group Pay module 1.5 and earlier for WHMCS allows remote attackers to execute arbitrary SQL commands via the hash parameter.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free