Confixx 3.0 hotfix RELEASE NOTES Before starting the installation or upgrade process we strongly recommend for you to create a full system backup of the entire server. Description =========== A security hole is fixed in the hotfix. With special string any reseller can view list of all users in Confixx and even perform any SQL query on Confixx database Requirements ============ The hotfix could be applied to the following versions of Confixx: * Confixx Professional 3.0.5 * Confixx Professional 3.0.6 * Confixx Professional 3.0.7 * Confixx Professional 3.0.8 You must have * tar * gzip * uudecode utilities to be installed on your system. uudecode is usually included to the "sharutils" package. Install ======== You should download the hotfix file from sw-soft.com (confixx_v3.0.8-build20050505.10_php_hotfix.sh.gz) Copy the hotfix to the Confixx installation directory, then gzip -d ./confixx_v3.0.8-build20050505.10_php_hotfix.sh.gz sh ./confixx_v3.0.8-build20050505.10_php_hotfix.sh Now you have the hotfix installed. Contact Information =================== SWsoft Headquarters 13800 Coppermine Drive Suite 112 herndon, va 20171 usa phone: +1.703.815.5670, fax: +1.703.815.5675 world wide web: http://www.sw-soft.com e-mail: for billing information, email accounting@sw-soft.com for purchasing or partnering information, email sales@sw-soft.com for technical support, use our Onle Support Form. For information on career opportunities with SWsoft, email careers@sw-soft.com For press contact information, email press@sw-soft.com For information about becoming a Partner, email partners@sw-soft.com For general product information, email info@confixx.com Copyright 2002, 2003, 2004 SWsoft, Inc. All rights reserved.