• Welcome to Web Hosting Community Forum for Webmasters - Web hosting Forum.
 

Recommended Providers

Fully Managed WordPress Hosting
lc_banner_leadgen_3
Fully Managed WordPress Hosting

WordPress Theme

Divi WordPress Theme
WPZOOM

Recent Topics

Forum Membership

Forum Membership

Hostbill 4.6 severe Security Vulnerability

Started by Kailash, May 30, 2013, 11:37:32 AM

Kailash

Hostbill 4.6 has severe security vulnerability and it allows someone to dump entire database and download it. This allows attackers to gain sensitive information including credit card details. The root cause of this vulnerability is "/includes/cpupdate.php" file. A patch has been released by Hostbill to address this security vulnerability. It can be downloaded from the following:

https://hostbillapp.com/clientarea/patches/hostbill_patch4.6.0_4324.zip

It is strongly recommend you immediately apply this patch.

Source: http://blog.webhostingdiscussion.net/webhosting/hostbill-4-6-severe-security-vulnerability.htm