WHMCS 5.2.10 exploit

[BennyKusman]

barusan keluar 1 jam yang lalu, exploit untuk whmcs 5.2.10..

segera shutdown dan tunggu patch dari WHMCS..

dari forum wht, sudah banyak didiskusikan...

 

[BennyKusman]

dari WHMCS: http://blog.whmcs.com/?t=80587

 

[derrimaulana]

Makasih om ben infonya, mohon updatenya lagi nanti

 

[galuh82]

saya paste pointnya

We are aware of the issue and are investigating it, and will be issuing a fix for this issue along with any others we discover during our targeted investigation shortly. In the meantime disabling the Mass Payment feature voids the immediate threat.

You can do this by de-selecting the "Enable Mass Payment" checkbox in Setup > General Settings > Invoices and saving.

 

[jetdino]

Kenapa WHMCS ga mau audit codingnya ya?

--Message from WHMCS--- We understand the frustration regarding security that you are having with WHMCS. At WHMCS, it's our desire to take a proactive approach to resolving bugs and preventing security problems in our product. To this point, we have and will continue to conduct both internal and external security audits to further harden and protect our software’s security. While we've been reactive to the recent security problems, it's not how we prefer to operate. The upcoming release of WHMCS, which is currently in beta, will provide over 170 documented bug fixes in our product (http://docs.whmcs.com/Changelog:WHMCS_V5.3).

 

[andhi]

saya paste pointnya

Done, thanks mas

Tinggal nunggu patchnya

 

[vanquizhers]

Terima kasih infonya pak Ben....
WHMCS?

 

[idroot]

Yg nemuin bug-nya kali ini baik hati

"I decided to give WHMCS a chance to patch this...."

 

[jetdino]

Yg nemuin bug-nya kali ini baik hati

"I decided to give WHMCS a chance to patch this...."

Iya yang jadi masalah kalimat ".....The first part of this vulnerability" hhehee masih banyak part yang lain kayaknya

 

[voezie]

Kenapa WHMCS ga mau audit codingnya ya?

--Message from WHMCS--- We understand the frustration regarding security that you are having with WHMCS. At WHMCS, it's our desire to take a proactive approach to resolving bugs and preventing security problems in our product. To this point, we have and will continue to conduct both internal and external security audits to further harden and protect our software’s security. While we've been reactive to the recent security problems, it's not how we prefer to operate. The upcoming release of WHMCS, which is currently in beta, will provide over 170 documented bug fixes in our product (http://docs.whmcs.com/Changelog:WHMCS_V5.3).

Perlu waktu cukup lama untuk proses external audit, paling cepat 1 bulan seperti yang dilakukan solusvm