20 matches found
ubilling-multi-vuln-cve
GitHub Security Advisory: Ubilling — Multiple Critical Vulnera...
CVE-2018-1000827
Ubilling version = 0.9.2 contains a Other/Unknown vulnerability in user-controlled parameter that can result in Disclosure of confidential data, denial of service, SSRF, remote code execution...
EUVD-2020-21686
Malware in sbrugna...
EUVD-2018-2019
Malware in sbrugna...
CVE-2020-29311
Ubilling v1.0.9 allows Remote Command Execution as Root user by executing a malicious command that is injected inside the config file and being triggered by another part of the software...
CVE-2020-29311
Ubilling v1.0.9 allows Remote Command Execution as Root user by executing a malicious command that is injected inside the config file and being triggered by another part of the software...
CVE-2020-29311
Ubilling v1.0.9 allows Remote Command Execution as Root user by executing a malicious command that is injected inside the config file and being triggered by another part of the software...
Command injection
Ubilling v1.0.9 allows Remote Command Execution as Root user by executing a malicious command that is injected inside the config file and being triggered by another part of the software...
CVE-2020-29311
Ubilling v1.0.9 is affected by a remote command execution (RCE) vulnerability caused by command injection in the config file that is triggered by another part of the software. The issue allows an attacker to execute arbitrary commands as root. CVSS metrics indicate a network-exposed, low-complexi...
CVE-2020-29311
Ubilling v1.0.9 allows Remote Command Execution as Root user by executing a malicious command that is injected inside the config file and being triggered by another part of the software...
Nightflyza Ubilling Command Injection Vulnerability
Nightflyza Ubilling is an open source ISP billing system based on Php, stargazer by Nightflyza individual developers. A security vulnerability exists in Ubilling v1.0.9, which stems from Ubilling allowing remote commands to be executed as the root user. An attacker can exploit the vulnerability t...
PT-2020-17140
Name of the Vulnerable Software and Affected Versions Ubilling version 1.0.9 Description The issue allows Remote Command Execution as a Root user. This is achieved by injecting a malicious command inside the config file, which is then triggered by another part of the software. Recommendations For...
CVE-2020-29311: Improper Neutralization of Special Elements used in an OS Command
Ubilling v1.0.9 allows Remote Command Execution as Root user by executing a malicious command that is injected inside the config file and being triggered by another part of the software...
CVE-2018-1000827
Ubilling version = 0.9.2 contains a Other/Unknown vulnerability in user-controlled parameter that can result in Disclosure of confidential data, denial of service, SSRF, remote code execution...
CVE-2018-1000827
Ubilling version = 0.9.2 contains a Other/Unknown vulnerability in user-controlled parameter that can result in Disclosure of confidential data, denial of service, SSRF, remote code execution...
Remote code execution
Ubilling version = 0.9.2 contains a Other/Unknown vulnerability in user-controlled parameter that can result in Disclosure of confidential data, denial of service, SSRF, remote code execution...
CVE-2018-1000827
Ubilling version
CVE-2018-1000827
Ubilling version = 0.9.2 contains a Other/Unknown vulnerability in user-controlled parameter that can result in Disclosure of confidential data, denial of service, SSRF, remote code execution...
CVE-2018-1000827: Deserialization of Untrusted Data
Ubilling version = 0.9.2 contains a Other/Unknown vulnerability in user-controlled parameter that can result in Disclosure of confidential data, denial of service, SSRF, remote code execution...
PT-2018-9551
Name of the Vulnerable Software and Affected Versions Ubilling versions prior to 0.9.3 Description The issue concerns a user-controlled parameter that can lead to disclosure of confidential data, denial of service, SSRF, and remote code execution. Recommendations For Ubilling versions prior to...