WHMCS CEO Matt Posted March 18, 2009 WHMCS CEO Share Posted March 18, 2009 WHMCS V3.8.2 We were notified yesterday (17/03/2009) of a vulnerability affecting the client area (and which poses no threat to admin access). Although so far unpublished, we recommend that all customers apply this patch as soon as possible in order to prevent any issues from it being discovered. Affected versions are V3.7 & V3.8. WHMCS is committed to delivering secure software and this proactive patch is evidence of our commitment. The patch also contains all the bug fixes made to the V3.8 release to date. It is a changed files update only and so there is no install process or template updates necessary. Changelog System SSL URL not being passed to templates when set Unable to delete line items/options in configurable options & quotes Contact form email not showing users email address when sent using SMTP Sorting by payment method on orders page returns an error Validation loses field values when creating new support ticket in the admin area Update for .eu WHOIS server available response change and other minor changes Open Ticket quick link in actions panel on client summary page not auto selecting client Product upgrade options listing not using the sort order defined in the product config Prorata billing calculations always being done based on 30 days in a month rather than actual days Mass Mail option to send emails only once per customer and not for every matching product Domain renewal reminder notices being addressed incorrectly in some circumstances Addons always being set to not apply tax after ordering Commas in support ticket urls causing auto linking to end prematurely Fixed bug in capture payment API function The update is available for download from our client area @ http://www.whmcs.com/clients Link to comment Share on other sites More sharing options...
Recommended Posts