cve/2023/CVE-2023-30258.md

CVE-2023-30258

Description

Command Injection vulnerability in MagnusSolution magnusbilling 6.x and 7.x allows remote attackers to run arbitrary commands via unauthenticated HTTP request.

POC

Reference

• http://packetstormsecurity.com/files/175672/MagnusBilling-Remote-Command-Execution.html
• https://eldstal.se/advisories/230327-magnusbilling.html

Github

• https://github.com/RunasRs/Billing
• https://github.com/gy741/CVE-2023-30258-setup
• https://github.com/nomi-sec/PoC-in-GitHub