CVE-2023-30258
Command Injection vulnerability in MagnusSolution magnusbilling 6.x and 7.x allows remote attackers to run arbitrary commands via unauthenticated HTTP request.
- Affected products
- Magnusbilling
- Magnussolution Magnusbilling
- ≤ 7.3.0
- CVSS 3.1
- 9.8 CRITICAL
- EPSS
- 94.2% (100th percentile)
- Weakness
- CWE-77, CWE-78
- NVD status
- Modified
- Published
- 2023-06-23
CVE-2023-30258 at NVD
14 known exploits for CVE-2023-30258
Proof-of-concept code and exploit modules indexed by Sploitus
Exploit for OS Command Injection in Magnussolution Magnusbilling
Exploit for OS Command Injection in Magnussolution Magnusbilling
Exploit for Command Injection in Magnussolution Magnusbilling
📄 MagnusBilling 6 Server-Side Request Forgery / Path Traversal
Exploit for OS Command Injection in Magnussolution Magnusbilling
Exploit for OS Command Injection in Magnussolution Magnusbilling
Exploit for OS Command Injection in Magnussolution Magnusbilling
MagnusSolution magnusbilling 7.3.0 - Command Injection
📄 MagnusBilling 6.x / 7.x Command Injection
Exploit for OS Command Injection in Magnussolution Magnusbilling
Exploit for OS Command Injection in Magnussolution Magnusbilling
MagnusBilling Remote Command Execution Exploit
MagnusBilling Remote Command Execution
MagnusBilling application unauthenticated Remote Command Execution.