+ Reply to Thread
Results 1 to 4 of 4

Bookmark and Share

  1. June 21st, 2009 2:33 PM #1
    psfrog
    psfrog is offline
    Surpass Fan Comfy Contributor
    Points: 7,553, Level: 26
    Level completed: 1%, Points required for next Level: 597
    Overall activity: 8.0%
    Achievements:
    Veteran5000 Experience Points     psfrog's Avatar
    Member since
    Jun 2004
    Location
    Sweden
    posts
    282
    Points
    7,553
    Level
    26
    Thanks
    48
    Thanked 38 times
    Send a message via AIM to psfrog

    Exclamation WHMCS - Security Vulnerability

    An SQL injection vulnerability has been discovered where a variable is being incorrectly sanitized.
    It's described here: WHMCS V4.0.2 Patch Released - WHMCS Forums

    You should upgrade to the latest version asap - the upgrade is a simple replacement of some files - it doesn't require any database-upgrade or installation.
    :: Have a great day! /Erik at http://www.psychofrog.se and http://www.manufrog.com ::
    Server: Muy and Dedicated
    Reply With Quote Reply With Quote

  2. This user thanks psfrog for this great post!

    Roxy (June 22nd, 2009)
  3. June 22nd, 2009 9:41 AM #2
    Mark
    Mark is offline
    Surpass Developer Excelling Contributor
    Points: 8,864, Level: 28
    Level completed: 19%, Points required for next Level: 486
    Overall activity: 17.0%
    Achievements:
    Three FriendsVeteranTagger Second Class5000 Experience Points     Mark's Avatar
    Member since
    Jan 2004
    Location
    Florida
    posts
    809
    Points
    8,864
    Level
    28
    Thanks
    53
    Thanked 113 times
    Thank you for the Heads up Erik
    Reply With Quote Reply With Quote
  4. December 1st, 2011 3:10 PM #3
    psfrog
    psfrog is offline
    Surpass Fan Comfy Contributor
    Points: 7,553, Level: 26
    Level completed: 1%, Points required for next Level: 597
    Overall activity: 8.0%
    Achievements:
    Veteran5000 Experience Points     psfrog's Avatar
    Member since
    Jun 2004
    Location
    Sweden
    posts
    282
    Points
    7,553
    Level
    26
    Thanks
    48
    Thanked 38 times
    Send a message via AIM to psfrog
    A new security issue has been discovered today.

    More info here: http://forum.whmcs.com/showthread.php?t=43462

    WHMCS has released patches for it and it's just a single file to update to keep Your WHMCS safe.
    :: Have a great day! /Erik at http://www.psychofrog.se and http://www.manufrog.com ::
    Server: Muy and Dedicated
    Reply With Quote Reply With Quote

  5. These users thank psfrog for this great post!

    David (January 6th, 2012), Mark (December 2nd, 2011)
  6. May 1st, 2012 7:36 PM #4
    Geoff
    Geoff is offline
    Yabadabadoo Super #1
    Points: 8,495, Level: 27
    Level completed: 58%, Points required for next Level: 255
    Overall activity: 99.0%
    Achievements:
    Veteran5000 Experience PointsOverdrive     Geoff's Avatar
    Member since
    Nov 2004
    Location
    B.C., Canada
    posts
    1,092
    Points
    8,495
    Level
    27
    Thanks
    8
    Thanked 36 times
    Quote Originally Posted by psfrog View Post
    A new security issue has been discovered today.

    More info here: http://forum.whmcs.com/showthread.php?t=43462

    WHMCS has released patches for it and it's just a single file to update to keep Your WHMCS safe.
    This is definitely a crucial update... i see these attacks in my email every day despite not being vulnerable. That said... There is a good chance that you would never even know you were comprised if you dont know what to look for. The popular injection code ive been seeing is really good at cleaning up after itself...
    Geoff Ellis - Surpass Dedicated/VPS Customer Since 2004
    AdeptTechs ~ AdeptHost ~ TravellingOz ~ Photography ~ InfoHaven ~ G-NET
    Reply With Quote Reply With Quote
« Previous Thread | Next Thread »

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

     

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may edit your posts

Forum Rules