Attention! Security Issue for internet module reservation v2.00.046

Saturday, October 24th, 2009

Availabe version 2.00.047 going to fix the following security issue:

Due to a problem in the login engine, a member could assume the identity of other members, and then book indiscriminately products and make them unavailable and also change their balance on their account.

Usually the wvcgi module will auto-update, but if you still have version 2.00.046 (or below), please immediately contact your tech service to upgrade it immediatelly to version 2.00.047.

The wvcgi version number is displayed at the end of each page.

We do not provide any kind of assistance to those who have counterfeit versions of wvcgi.

For further technical details about the problem and how to exploit it, please contact your service center or the WinVideo Team (the author of software) at team@winvideo.net.

Thank you for your attention.

See also: ,

Leave a comment