MagnusSolution vulnerabilities
We track 2 vulnerabilities in MagnusSolution products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on July 31, 2025.
2vulnerabilities
1critical
1high
0exploited
8.9average CVSS score
Latest MagnusSolution vulnerabilities
- 8.0 High severity
Magnusbilling: Improper Privilege Management
A Broken Access Control vulnerability in MagnusBilling v7.8.5.3 allows newly registered users to gain escalated privileges by sending a crafted request to /mbilling/index.php/user/save to set their account status fom "pending" to "active" without requiring adm
- 9.8 Critical severity
Magnusbilling: Improper Neutralization of Special Elements used in an OS Command
Command Injection vulnerability in MagnusSolution magnusbilling 6.x and 7.x allows remote attackers to run arbitrary commands via unauthenticated HTTP request.