WHMCS Security Patch Released!

[Rox]

This is the post made by Matt (WHMCS Coder/Owner) on WHT.

Will keep this thread sticky for few days. Request all hosting providers who use WHMC to apply this patch ASAP!

Security Patch Release

Within the past few hours, an ethical programmer disclosed to us details of an SQL Injection Vulnerability present in current WHMCS releases.

The potential of this is lessened if you have followed the further security steps, but not entirely avoided.

And so we are releasing an immediate patch before the details become widely known.

Installing the patch is simply a case of uploading a single file to your root WHMCS directory. This one file works for all WHMCS versions V4.0 or Later.

http://go.whmcs.com/26/secpatch

The events of last week have obviously put a lot of focus on WHMCS in recent days from undesirable people. But please rest assured that we take security very seriously in the software we produce, and will never knowingly leave our users at risk. And on that note if any further issues come to light, we will not hesitate to release patches for them - as we hope our past history demonstrates.

We will not be able to respond to any questions here, but please contact us via ticket with any questions.

[This is being mailed out but if you can help spread the word faster to other WHMCS users you know, please do.]

Rox Reviewed by Rox on 29th May 2012. WHMCS Security Patch Released! This is the post made by Matt (WHMCS Coder/Owner) on WHT. Will keep this thread sticky for few days. :) Request all hosting providers who use WHMC to apply this patch ASAP! Rating: 5

[Harper]

Great! I'm glad that the person decided to report the bug rather than exploit it.

[ShareShiz]

thank god for white hat hackers.

[Techking]

Thanks ROX for your great info .

Regards
StableRDP

[Sp32]

I'm guessing this wasn't an ethical hacker, I am guessing this was an unethical hacker that exploited WHMCS and released the exploit then someone forwarded the exploited to WHMCS.

WHMCS seem to be irritating a lot of people.

[Harper]

@Sp32 when you're a big company and have market dominance you're certain to get alot of haters.

[ceekeigh]

Thanks for the share Rox.

[Shahrukh]

Trust has been Gone now you can release many of the Patches but you can't be 100% trusted!

[gfxguru]

yup did it already. thanks anyway...

[Mrgeek]

Ya it's good thing they patched it up.. It's nice to see matt is productive as soon as something happens they get on it.