Security Update: Fixes for Cross-site Scripting (Version 4.0)

Update and Patch File

We have released a patch as below, to fix the cross-site scription vulnerability. We urge our customers to download the fix file below and patch your /oneadmin/ directory as soon as possible.

Please follow the instructions below:

1. Download the attached patch40_04.zip file below.
2. Unzip the file and browse to your respective version. If you are using the IonCube version, please browse to the "ION_version" folder. If you are using the standard version, please browse to the "Standard_version" folder instead.
3. Copy the /common/include.php file and upload to your /oneadmin/common/ directory.
4. Please overwrite the old file with the one in the security patch.  You might want to make a backup copy of your original file first before uploading, just in case.

Should you need any further assistance, you are most welcome to contact us via our Support Ticket

Related FAQs In This Category