Exploit for Command Injection in Magnussolution Magnusbilling

🗓️ 25 Feb 2026 03:19:07Reported by estebanzarateType

Unauthenticated command injection in Magnus Billing v7 through the icepay.php democ parameter; outputs results to a webroot file.

Reporter	Title	Published	Views	Family All 27
GithubExploit	Exploit for OS Command Injection in Magnussolution Magnusbilling	7 Dec 202511:28	–	githubexploit
GithubExploit	Exploit for OS Command Injection in Magnussolution Magnusbilling	13 Jul 202512:53	–	githubexploit
GithubExploit	Exploit for OS Command Injection in Magnussolution Magnusbilling	25 Mar 202516:00	–	githubexploit
GithubExploit	Exploit for OS Command Injection in Magnussolution Magnusbilling	8 Apr 202612:14	–	githubexploit
GithubExploit	Exploit for OS Command Injection in Magnussolution Magnusbilling	12 Mar 202510:27	–	githubexploit
GithubExploit	Exploit for OS Command Injection in Magnussolution Magnusbilling	18 Sep 202515:32	–	githubexploit
GithubExploit	Exploit for OS Command Injection in Magnussolution Magnusbilling	8 Apr 202612:14	–	githubexploit
0day.today	MagnusBilling Remote Command Execution Exploit	14 Nov 202300:00	–	zdt
BDU FSTEC	The vulnerability of the exec() function in the icepay.php script of the MagnusBilling VoIP system allows a hacker to execute arbitrary commands.	19 Apr 202500:00	–	bdu_fstec
Circl	CVE-2023-30258	3 Nov 202320:01	–	circl

25 Feb 2026 03:20Current

6.1Medium risk

Vulners AI Score6.1

CVSS 3.19.8

EPSS0.91463

SSVC