Browse Tag: security

We’ve been notified about dangerous security threat found in one of HostBill files.
Severity depends on server configuration. We cannot leave our users at risk – we take security very seriously.

Download patch from here: https://hostbillapp.com/clientarea/patches/hostbill_patch4.6.0_4324.zip (for versions 4.4.0 and UP)

Please extract this patch in main HostBill directory. It is also available in auto-update plugin.

Version 4.6.0 available in downloads section has also been patched, so if you’re using older version it’s advised to upgrade to the latest version.

As scheduled – week passed and the new HostBill version is ready: 4.1.4 with multiple improvements and bug fixes is available for download.
What’s new:

Client signup captcha
Spambots now seem to attack even billing systems – there is no better way to prevent it than implementing captcha. By default new client signups require captcha confirmation (you can disable captcha field in Clients->Registration fields)

Client profile files
You can now upload files directly in client profile, so it can be accessible only by this client, or staff members visiting client profile.

Continue Reading

Within the last few hours we’ve been notified by external auditor about SQL Injection vulnerability found in current HostBill releases.

As 4.0 version is ready it also includes patch for this problem. Please update at your earliest convenience, before vulnerability details become widely known. We recommend using auto-upgrade plugin, to make sure you’re always up-to-date with recent updates/patches.

So whats new in HostBill 4.0.0 ?

Reports in HostBill
HostBill always had nice-looking and insightful graphical statistics, but we realize that sometimes numbers looks better printed, or are even required in this representation. Make sure to check flexible new reports, allowing for drag & drop output adjustments, multiple output formats (HTML, CSV, PDF, TXT & more) & easy report criteria modification in HostBill 4.0
Learn more at /

Continue Reading

Within last few hours we’ve been notified about potential LFD security threat that affects HostBill installations, caused by one of used libraries.
Although its severity really depends on server configuration we cannot leave our users at risk – we take security very seriously.

Download patch from here: http://hostbillapp.com/clientarea/patches/hostbill_patch3.8.0_3426.zip (for version 3.8).

Patching process is simple – extract archive contents in main HostBill directory, no db updates/install is required.

Continue Reading

Whats new in HostBill 3.1.2 ?
Translation tags – simple yet powerful tool to make your favourite billing system 100% multilingual – learn more.

OnApp Cloud selector – if you have more than one cloud installation – HostBill is the right billing system for you! Now you can give your customers the ability to select cloud during checkout with automatic provisioning still working – learn more.

Note: We’ve decided to release HostBill 3.1.2 sooner than expected (by exactly 2 days), as a result of potential security issue detected. Problem may apply to HostBills not secured after initial installation and using built-in HostBill ticketing system.

Continue Reading

HostBill 2.9 Full changelog: is available in our forum

Install/Upgrade instructions: available in our documentation.

Download: from client area.

Dear Clients!
HostBill 2.x security patch.
Last night one of our clients notified us about potential security threat affecting HostBill versions 2.x, which may allow to access admin area with previously stolen session cookie.

Please download this patch as soon as possible: https://hostbillapp.com/clientarea/index.php?cmd=module&module=downloads&file=11
To apply patch please extract archive contents in your HostBill directory, or upload its contents directly to your install (there is only one file that requires overwriting).

Continue Reading