Hello,

WHMCS sent us an email advising us of a potential vulnerability.  Therefore, we are writing to advise you of a potential security vulnerability when htaccess directives are not enforced appropriately for WHMCS. This most commonly occurs in web server environments such as nginx.

WHMCS 6.0 and later

If the following file is readable from a web browser, then you need to investigate and apply appropriate configurations for your web server environment.
A verification tool has also been made available to assist in determining if your web server environment is affected. This tool can be downloaded here.

Hi,

We were notified about some major vulnerabilities with CPanel's current version of EXIM and it can lead to exploitation for crypto attacks.  As a result, we have since the 6th of June been patching all of our servers.  All our shared servers are protected, but we need our dedicated and VPS clients to contact us ASAP.  We will be upgrading them as well as fast as possible.  If you don't want to upgrade, let us know, but we will be pushing heavily for it. 

To open a ticket please login with your email address and password.  It will be the same login as your Brain client area.  If you are unable to login please email [email protected] for support or [email protected] for sales questions.  The Support Dept. is available 24/7/365 and the Sales Dept. is available M-F 7 am - 3pm.