318 matches found
FOSSBilling < 0.5.3 - Cross-Site Scripting
Cross-site Scripting XSS - Reflected in GitHub repository fossbilling/fossbilling prior to 0.5.4. id: CVE-2023-3521 info: name: FOSSBilling &datefrom='" HTTP/1.1 Host: Hostname matchers-condition: and matchers: - type: word part: body words:...
CVE-2026-28496-Lab
CVE-2026-28496 - FOSSBilling ๆๅกๅจ็ซฏๆจกๆฟๆณจๅ ฅ๏ผTwig ๆธฒๆ๏ผ ๆฆ่ฟฐ ๆฌไปๅบๅ ๅซไธไธชๆฌๅฐ Docker ๅฎ้ช็ฏๅข๏ผ็จไบๅค็ฐๅ้ช่ฏ CVE-2026-28496๏ผ่ฟๆฏไธไธชๅฝฑๅ FOSSBilling ็ Twig ๆจกๆฟๆธฒๆ่กไธบ็ๆๅกๅจ็ซฏๆจกๆฟๆณจๅ ฅๆผๆดใ FOSSBilling ๆฏไธไธชๅ ่ดนๅผๆบ็ๅผ็ฅจๅๅฎขๆท็ฎก็ๅนณๅฐใ0.8.0 ไนๅ็็ๆฌๅๅฐไธๅฎๅ จ็ Twig ๆจกๆฟๆธฒๆ่กไธบๅฝฑๅ๏ผ่ฏฅ่กไธบๅฏไปฅ่ฏไผฐๆไพ็ๆจกๆฟ่กจ่พพๅผใๆฌๅฎ้ชไฝฟ็จ FOSSBilling 0.8.0 ไฝไธบๅทฒไฟฎ่กฅ็ๆฏ่พ็ฎๆ ใ ๆฌๅฎ้ชๆฏ่พไธคไธช FOSSBilling ็ๆฌ๏ผ ๆๅก| FOSSBilling ็ๆฌ|...
FOSKiller
โโโโโโโโ โโโโโโโ โโโโโโโโโโโ โโโโโโโโโ โโโ โโโโโโโโโโโโโโโ โโโโโโโโโโโโโโโโโโโโโโโโโโโโ โโโโโโโโโโ โโโ โโโโโโโโโโโโโโโโ โโโโโโ โโโ โโโโโโโโโโโโโโโโโโ โโโโโโ โโโ โโโโโโ โโโโโโโโ โโโโโโ โโโ โโโโโโโโโโโโโโโโโโ โโโโโโ โโโ โโโโโโ โโโโโโโโ โโโ โโโโโโโโโโโโโโโโโโโโ โโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโ โโโ...
CVE-2026-28496
CVE-2026-27604 + CVE-2026-28496 โ Cadena de RCE Pre-Auth en FOSSBilling Resumen Ejecutivo Este repositorio contiene un laboratorio Docker local para reproducir y validar la cadena de RCE Pre-Auth en FOSSBilling, compuesta por dos vulnerabilidades encadenadas: CVE| Tipo| CVSS v4| GHSA| Descripciรณn...
Exploit for CVE-2026-28496
CVE-2026-27604 + CVE-2026-28496 โ FOSSBilling Pre-Auth RCE Cha...
CVE-2026-53647
FOSSBilling is a free, open-source billing and client management system. In versions 0.5.3 through 0.7.2, the Guest serviceapikey/getinfo API endpoint is accessible without authentication. Any caller with a valid API key can retrieve all custom configuration parameters custom fields stored in the...
CVE-2026-53648
FOSSBilling is a free, open-source billing and client management system. Prior to version 0.8.1, downloadable product files are stored using a deterministic filename-derived path. When an administrator uploads a file for a downloadable product, FOSSBilling stores the file as md5 under the uploads...
CVE-2026-53647: Exposure of Sensitive Information to an Unauthorized Actor
FOSSBilling is a free, open-source billing and client management system. In versions 0.5.3 through 0.7.2, the Guest serviceapikey/getinfo API endpoint is accessible without authentication. Any caller with a valid API key can retrieve all custom configuration parameters custom fields stored in the...
CVE-2026-53648: External Control of File Name or Path
FOSSBilling is a free, open-source billing and client management system. Prior to version 0.8.1, downloadable product files are stored using a deterministic filename-derived path. When an administrator uploads a file for a downloadable product, FOSSBilling stores the file as md5 under the uploads...
CVE-2026-53642
FOSSBilling is a free, open-source billing and client management system. In versions 0.5.6 through 0.7.2, when the "Require Email Confirmation" setting is enabled, a logged-in client with an unverified email address emailapproved = 0 can access all client-area pages e.g. /client/balance,...
CVE-2026-53644
FOSSBilling is a free, open-source billing and client management system. Versions 0.5.3 through 0.7.2 allow authenticated clients to both read and reset API key service secrets for orders that are no longer in an active state e.g., suspended, canceled. The root cause is missing order-state...
CVE-2026-53646
FOSSBilling is a free, open-source billing and client management system. In versions 0.5.6 through 0.7.2, when a ClientPasswordReset record already exists for a client from a previous unexpired reset request, subsequent calls to the resetpassword guest API endpoint reuse the existing token instea...
CVE-2026-53645
FOSSBilling is a free, open-source billing and client management system. Versions prior to 0.8.0 allow a low-privileged staff account to grant arbitrary module permissions to itself through the admin API, resulting in persistent privilege escalation. A staff user that only has...
CVE-2026-53643
FOSSBilling is a free, open-source billing and client management system. Versions prior to 0.8.0 allow low-privileged staff accounts to perform unauthorized actions via admin API endpoints. The root cause is a combination of the canalwaysaccess module flag which grants all staff access to certain...
CVE-2026-53641
FOSSBilling is a free, open-source billing and client management system. Versions 0.6.0 through 0.7.2 have a stored cross-site scripting XSS vulnerability in the client-facing email history views of FOSSBilling. Email HTML content contenthtml is rendered into a JavaScript template literal using t...
CVE-2026-53640
FOSSBilling is a free, open-source billing and client management system. Prior to version 0.8.0, low-privileged staff accounts may read sensitive data via admin API endpoints that lack permission checks. While sibling write endpoints correctly enforce fine-grained permissions, the corresponding...
EUVD-2026-41974
FOSSBilling is a free, open-source billing and client management system. Prior to version 0.8.1, downloadable product files are stored using a deterministic filename-derived path. When an administrator uploads a file for a downloadable product, FOSSBilling stores the file as md5 under the uploads...
CVE-2026-53648
FOSSBilling prior to v0.8.1 stores downloadable product files with a deterministic path md5(), so files with identical names between different products/orders map to the same stored path and can be overwritten by later uploads. This leads to customers/admins downloading the wrong file. Version 0....
CVE-2026-53648 FOSSBilling: Downloadable product files can be overwritten through filename collisions
FOSSBilling is a free, open-source billing and client management system. Prior to version 0.8.1, downloadable product files are stored using a deterministic filename-derived path. When an administrator uploads a file for a downloadable product, FOSSBilling stores the file as md5 under the uploads...
CVE-2026-53648
FOSSBilling is a free, open-source billing and client management system. Prior to version 0.8.1, downloadable product files are stored using a deterministic filename-derived path. When an administrator uploads a file for a downloadable product, FOSSBilling stores the file as md5 under the uploads...