CVE-2023-30258-magnus-billing-v7-exploit

Magnus Billing System v7 エクスプロイト このPythonスクリプトは、Magnus Billing System v7のコマンドインジェクション脆弱性、具体的には /mbilling/lib/icepay/icepay.php にある icepay.php スクリプトの脆弱性を悪用する処理を自動化します。このエクスプロイトは democ パラメータを利用して対象システム上で任意のコマンドを実行し、最終的に攻撃者が管理するマシンへのリバースシェルを確立します。 脆弱性の概要...

CVE-2023-30258-Magnus-Billing-v7-Command-Injection-PoC

CVE-2023-30258 — Magnus Billing v7 Command Injection PoC Unauthenticated command injection vulnerability in Magnus Billing v7.3.0. The democ GET parameter in icepay.php is passed directly to a shell function without sanitization, allowing arbitrary command execution as the web server user. The...

magnus_billing_7.3.0_RCE_CVE-2023-30258

magnusbilling7.3.0RCECVE-2023-30258 There is a remote code execution vulnerability in magnus billing 7.3.0, in the parameter "democ" from the "icepay.php" resource, where you can escape the query and execute the command you want. VULNERABLE CODE if isset$GET'democ' if strlen$GET'democ' 5 exec"tou...

Exploit for Command Injection in Magnussolution Magnusbilling

CVE-2023-30258 — Magnus Billing v7 Command Injection PoC...

Exploit for OS Command Injection in Magnussolution Magnusbilling

magnusbilling7.3.0RCECVE-2023-30258 There is a remote cod...

The vulnerability of the exec() function in the icepay.php script of the MagnusBilling VoIP system allows a hacker to execute arbitrary commands.

The vulnerability of the exec function in the icepay.php script of the MagnusBilling VoIP system is related to the failure to take measures to neutralize special elements used in the operating system’s commands when processing the democ parameter. Exploiting this vulnerability allows a remote...