WHMCS security update
NOTE: The patch causes some problems, for example when you order a hosting plan with a domain WHMCS will fail. We advise to temporarily shut down your WHMCS installation until there is a fixed patch.
WHMCS has sent an e-mail with a security update. We’ve a mirror for the file here. This update  is legimate (verified with the WHMCS ticket system) but WHMCS is currently down, so we’ve mirrored the file here for you:)
Within the past few hours, an ethical programmer disclosed to us details of an SQL Injection Vulnerability present in current WHMCS releases.Â
The potential of this is lessened if you have followed the Further Security Steps, but not entirely avoided.Â
We are therefore releasing an immediate patch before the details become widely known.Â
Installing the patch is simply a case of uploading a single file to your root WHMCS directory. This one file works for all WHMCS versions V4.0 or Later.Â
>>Â Â http://go.whmcs.com/26/secpatchÂ
The events of last week have obviously put a lot of focus on WHMCS in recent days from undesirable people. But please rest assured that we take security very seriously in the software we produce, and will never knowingly leave our users at risk. And on that note if any further issues come to light, we will not hesitate to release patches for them – as we hope our past history demonstrates.Â
We thank you for choosing WHMCS.Â
WHMCS Limitedwww.whmcs.comÂ
* This is a genuine email. The security patch can also be found in our client area downloads.Â
Tags: 29 May 2012, patch, security update, WHMCS