Описание
Command Injection vulnerability in MagnusSolution magnusbilling 6.x and 7.x allows remote attackers to run arbitrary commands via unauthenticated HTTP request.
Command Injection vulnerability in MagnusSolution magnusbilling 6.x and 7.x allows remote attackers to run arbitrary commands via unauthenticated HTTP request.
Ссылки
- https://nvd.nist.gov/vuln/detail/CVE-2023-30258
- https://github.com/magnussolution/magnusbilling7/commit/ccff9f6370f530cc41ef7de2e31d7590a0fdb8c3
- https://eldstal.se/advisories/230327-magnusbilling.html
- https://github.com/MarkLee131/awesome-web-pocs/blob/main/CVE-2023-30258.md
- http://packetstormsecurity.com/files/175672/MagnusBilling-Remote-Command-Execution.html
Связанные уязвимости
CVSS3: 9.8
nvd
больше 2 лет назад
Command Injection vulnerability in MagnusSolution magnusbilling 6.x and 7.x allows remote attackers to run arbitrary commands via unauthenticated HTTP request.
CVSS3: 9.8
fstec
почти 3 года назад
Уязвимость функции exec() сценария icepay.php VoIP-системы MagnusBilling, позволяющая нарушителю выполнить произвольные команды