WHMCS V3.8.2 Released (Security Update)
March 18th, 2009A new patch was released yesterday which everyone is being encouraged to update to immediately as it addresses possible security vulnerabilities within the system. The download is available from WHMCS or existing clients who have registered WHMCS through us may download here.
Excerpt from WHMCS:
WHMCS V3.8.2 Patch Released
We were notified yesterday (17/03/2009) of a vulnerability affecting the client area (and which poses no threat to admin access).
Although so far unpublished, we recommend that all customers apply this patch as soon as possible in order to prevent any issues from it being discovered. Affected versions are V3.7 & V3.8.
WHMCS is committed to delivering secure software and this proactive patch is evidence of our commitment.
The patch also contains all the bug fixes made to the V3.8 release to date. It is a changed files update only and so there is no install process or template updates necessary.
Changelog
- System SSL URL not being passed to templates when set
- Unable to delete line items/options in configurable options & quotes
- Contact form email not showing users email address when sent using SMTP
- Sorting by payment method on orders page returns an error
- Validation loses field values when creating new support ticket in the admin area
- Update for .eu WHOIS server available response change and other minor changes
- Open Ticket quick link in actions panel on client summary page not auto selecting client
- Product upgrade options listing not using the sort order defined in the product config
- Prorata billing calculations always being done based on 30 days in a month rather than actual days
- Mass Mail option to send emails only once per customer and not for every matching product
- Domain renewal reminder notices being addressed incorrectly in some circumstances
- Addons always being set to not apply tax after ordering
- Commas in support ticket urls causing auto linking to end prematurely
- Fixed bug in capture payment API function