MagnusBilling vulnerabilities

2 known vulnerabilities in MagnusBilling from MagnusSolution. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.0 High severity

  Magnusbilling: Improper Privilege Management

  CVE-2025-52289Jul 31, 2025MagnusSolution

  A Broken Access Control vulnerability in MagnusBilling v7.8.5.3 allows newly registered users to gain escalated privileges by sending a crafted request to /mbilling/index.php/user/save to set their account status fom "pending" to "active" without requiring adm

• 9.8 Critical severity

  Magnusbilling: Improper Neutralization of Special Elements used in an OS Command

  CVE-2023-30258Jun 23, 2023MagnusSolutionEPSS 94.3%

  Command Injection vulnerability in MagnusSolution magnusbilling 6.x and 7.x allows remote attackers to run arbitrary commands via unauthenticated HTTP request.