on Friday, 23. Jul. Laurent Declerq discovered a security hole in the
client/sql_auth.php file.
This hole allows a client to access other customer's databases without
knowing the password. All released ispCP Omega versions are affected.
We strongly recommend to fix this hole to protect your clients' data.
You will find a patch for against ispCP 1.0.5 attached to ticket #2410
(http://isp-control.net/ispcp/ticket/2410).
Sorry for any inconvenience caused.
Best Regards,
Benedikt Heintel
ispCP Project Manager