WHMCS-John
New Member
WHMCS Security Alert
We have become aware of a security issue that exists in the third party Boleto module included in WHMCS releases. This can potentially be used to exploit a WHMCS installation.
If you do not use the Boleto module, then the quickest and easiest solution is to simply delete the /modules/gateways/boleto/ folder entirely after which you will not be at risk.
Alternatively if you do use the module, you can download and apply the patch to your installation here: http://www.whmcs.com/members/dl.php?type=d&id=138
This issue affects all WHMCS versions.
If you have any questions or need any assistance, please do not hesitate to contact us. We apologize for the inconvenience.
As always, this is a copy of the official post @ http://forum.whmcs.com/showthread.php?60646-WHMCS-Security-Alert to confirm authenticity. This post is purely to help spread the word to all users as quickly as possible. Email notifications are going out as well.
We have become aware of a security issue that exists in the third party Boleto module included in WHMCS releases. This can potentially be used to exploit a WHMCS installation.
If you do not use the Boleto module, then the quickest and easiest solution is to simply delete the /modules/gateways/boleto/ folder entirely after which you will not be at risk.
Alternatively if you do use the module, you can download and apply the patch to your installation here: http://www.whmcs.com/members/dl.php?type=d&id=138
This issue affects all WHMCS versions.
If you have any questions or need any assistance, please do not hesitate to contact us. We apologize for the inconvenience.
As always, this is a copy of the official post @ http://forum.whmcs.com/showthread.php?60646-WHMCS-Security-Alert to confirm authenticity. This post is purely to help spread the word to all users as quickly as possible. Email notifications are going out as well.
![[JSH]John](/forums/data/avatars/m/16825/16825422.jpg?1593857300){kind=avatar}
.