From the blog
Changelog

Browse Tag: security

PHP security update for HostBill: CVE-2026-109618 and CVE-2026-109619

PHP Security Advisory: CVE-2026-109618 & CVE-2026-109619 and your HostBill installation

On October 21, 2026 the PHP project released emergency security updates for two critical vulnerabilities in the PHP engine itself: CVE-2026-109618 and CVE-2026-109619 (also referred to as “PHP2Shell”). These issues are not specific to HostBill. They affect PHP itself, which means every application running on an unpatched PHP version is exposed, including HostBill. Please make sure the server running your HostBill is updated as soon as possible.

Continue Reading

The GDPR Compliance

The GDPR Compliance

  • By Dominika Grzesik
  • on
  • updated
  • in Announcements

As of 25th May 2018 the General Data Protection Regulation comes into force.  At HostBill we have always been committed to data privacy and security and we have taken all necessary steps to ensure GDPR compliance.

Continue Reading

Security Advisory - HostBill version 2013-12-14

  • By HostBill Team
  • on
  • updated
  • in Announcements

We’ve just released security update for HostBill, as a response to potentially dangerous XSS Vulnerability.

Applying update
To apply security update please download and update HostBill to the lateste 2013-12-14 version.
You can also use our auto-upgrade plugin to perform this automatically.

Upgrading to new version: https://hostbill.atlassian.net/wiki/spaces/DOCS/pages/491585/Upgrading+to+new+version
Using auto upgrade plugin: https://hostbill.atlassian.net/wiki/spaces/DOCS/pages/491588/Auto-Upgrade+plugin

We believe that this vulnerability is not known to the public. Its severity depends on admin area protection.
KBKP Software always encourages our clients to take extra steps for protection:
https://hostbill.atlassian.net/wiki/spaces/DOCS/pages/1212438/Security

Continue Reading

Security Advisory - HostBill versions 4.x

  • By HostBill Team
  • on
  • updated
  • in Announcements

In the last couple hours we’ve released patch for HostBill versions 4.x available from auto-update plugin and to download directly from:

https://hostbillapp.com/clientarea/patches/hostbill_patch4.6.4_4347.zip

For manual patch apply please extract archive contents in main HostBill directory.
We strongly recommend upgrading to the latest HostBill version (4.6.4 – archive also contains patched files)

Patched vulnerability
We’ve been notified about brute-force attack possible to be performed by logged in customers into other client’s accounts.

Continue Reading