Global fix for various MySQL injections. Unrar and upload the files to your webSPELL root folder.

for 4.01.02 only

32393

Fixes a security hole in picture.php (requirement: register_globals = On) and prevents cookie attack via src/login.php
Unrar and upload the files to your webSPELL root folder.

for <=4.01.02 only

30540

Fixes a security hole in src/login.php

Unrar and upload the files to your webSPELL root folder.

for <=4.01.02 only

9591