Description

Command Injection vulnerability in MagnusSolution magnusbilling 6.x and 7.x allows remote attackers to run arbitrary commands via unauthenticated HTTP request.

Classification

CVE ID: CVE-2023-30258

CVSS Base Severity: LOW

CVSS Base Score: 0.0

Affected Products

Vendor: n/a

Product: n/a

Nuclei Template

http/cves/2023/CVE-2023-30258.yaml

Exploit Prediction Scoring System (EPSS)

EPSS Score: 79.42% (probability of being exploited)

EPSS Percentile: 98.54% (scored less or equal to compared to others)

EPSS Date: 2025-02-03 (when was this score calculated)

References

https://eldstal.se/advisories/230327-magnusbilling.html
https://github.com/magnussolution/magnusbilling7/commit/ccff9f6370f530cc41ef7de2e31d7590a0fdb8c3
http://packetstormsecurity.com/files/175672/MagnusBilling-Remote-Command-Execution.html

Timeline