[not reproducible] security issue?

[franxiscoflores]

Hi there,

 

today i receive a order notification for a hosting account,

the domain name for that order is "mercyhouse.hostingamigable.com"

the domain "hostingamigable.com" is my main domain and there is whmcs installed.

 

i don´t have the subdomain purchase enabled.

 

i have made a test and try to order a hosting account with a subdomain, but i get a warning it says that the domain name is not valid, so far so good.

 

the cuestion is how can someone make a order with a subdomain and pass through.

 

i think there is a security issue.

[brian!]

which version of whmcs are you using?

[franxiscoflores]

hi Brian,

 

i am ussing version 5.2.16

[brian!]

I suggest that it might be better to open a support ticket about this... you'll then be able to give WHMCS technical / log details that you probably shouldn't mention here.

 

they should be able to confirm whether there is an issue with the software and/or your site security.

 

I couldn't reproduce it on your site, nor could I on mine (using v.5.3.5) - I could guess at a few reasons, but it's probably best to let WHMCS look into it...

[franxiscoflores]

hi Brian,

 

i am on this moment upgrading to version 5.3.5, but i will do what you suggest and send a support ticket.

Thanks

[zomex]

Which type of product/service is this for? Standard shared hosting or a VPS/dedicated server?

[franxiscoflores]

Hi zomex,

 

Standard shared hosting, but i already have created a support ticket for this issue.

 

thanks

[WHMCS Nate]

Hello,

 

Can you PM me your support ticket so I can look into this further and update the thread with what was found?

 

Thanks very much,

 

Nate C