nBill Community nBill Home Page
21/May/2012, 11:58:03 PM *
Welcome, Guest. Please login or register.

Login with username, password and session length
News: Click Here for the nBill home page, or take a tour.  
 
   Home   Help Search Login Register  
nBill Community > Announcements > Official Announcements > Security Issue with Quotes in nBill 2.0.9
Pages: [1]
« previous next »
  Print  
Author Topic: Security Issue with Quotes in nBill 2.0.9  (Read 733 times)
netshine
Administrator
Hero Member
*****
Offline Offline

Posts: 4,563


View Profile
« on: 03/September/2010, 07:25:04 PM »
It was brought to my attention a few minutes ago that it is possible for a user to gain access to another user's quotes by modifying the quote ID number in the URL when editing a quote. A fix is available from the known issues page: http://www.nbill.co.uk/support/known-issues.html. This fix is only needed if you are using the quotes feature. The fix will be included in the next release.
Logged
Pages: [1]
  Print  
« previous next »
 
Jump to:  

Powered by MySQL Powered by PHP Powered by SMF 1.1.16 | SMF © 2011, Simple Machines Valid XHTML 1.0! Valid CSS!