New on LowEndTalk? Please Register and read our Community Rules.
All new Registrations are manually reviewed and approved, so a short delay after registration may occur before your account becomes active.
All new Registrations are manually reviewed and approved, so a short delay after registration may occur before your account becomes active.
WHMCS Another Exploit?
Today 1 client register with this first name
First Name: 'Mark' to 'AES_ENCRYPT(1,1), firstname=(SELECT GROUP_CONCAT(id,0x3a,username,0x3a,email,0x3a,password SEPARATOR 0x2c20) FROM tbladmins)'
May be this user wanted admin access thats why trying to insert tbladmin table.
Comments
This is old, i have users signing up and doing this every single day
Then i am new to it then.
new exploit coming soon. #lolWHMCS
That's nothings new, Was a old exploit for v5.2x as the WHMCS has been fixed.
I had 2 users trying it 12 hours ago.