Until the zen team can review it it can be downloaded from here.
http://########################.co.uk/versions/b...lmail_v2.3.zip
Here is a summary of the changes, including SQL insertion and XSS flaws, and I threw in a couple of new modules (4 actually) for extra insurance on special delivery items as well as corrected numerous mistakes. Postal prices are valid until 6th April 2009 after that a SQL patch will be available for the new postal rates.
Released under the GPL, please send donations to [email protected], thank you.
9/03/2009 - 2009 (c) Philip Clarke
Rates correct to April 5 2009, SQL patch will be released for the 2009 rate increase,
Works with Zen Cart version 1.3.5 to 1.3.8
Airmail, Airsure, Airsure 500, International Signed for, ISF 500 Rates all corrected.
Standard Parcels, 100, 250 and 500 corrected and cleaned up.
Security update
Prior to this release, optional components for shipping estimator had XSS and possible SQL insertion flaws
New for 2.3
Added Special delivery £1000 and £2500 insurance options.
confirmed working with ZC versions 1.3.0 to 1.3.8
Bookmarks