ثغرة أمنية فى إسكربت Clientexec

[7dodcom]

تم إكتشاف ثغرة أمنية من نوعية SQL Injection

والحل لهذة الثغرة إبدال بعض الملفات

فقم بتنزيل الملف
http://forums.7dod.com/attachment.php?attachmentid=180

وفك الضغط وأرفع الملفات فى المسار /modules/billing/

[SoFiMaN]

فعلا هناك ثغرة في السكربت .. وهذي رسالة الشركة :

In response to this thread: http://www.clientexec.com/forum/showthread.php?t=8005 regarding SQL Injection Vulnerabilities, we have released a patch for version 2.5.0 - 2.5.2 of Clientexec. To install, download the attachment, unzip, and upload into the /modules/billing/ directory.

We will be releasing patches down through version 2.3 as well, but we always recommend to stay current with our application to ensure security updates, as well as features are up to date.

You can also download this patch from the thread mentioned above, or you can download the patch from the following link: http://www.clientexec.com/downloads/...ypatch_2.5.zip

*ملاحظة:هذا الباتش خاص فقط للاصدارين 2.5.0 و 2.5.2

تحياتي =)

[كارم ابراهيم]

الف شكر على المعلومة اخى الكريم

[Eng / Mostafa]

تم التحديث...