{"id":"CVE-2020-29311","aliases":["EUVD-2020-21686","GHSA-473q-vgvv-5537"],"status":"published","title":"Ubilling v1.0.9 allows Remote Command Execution as Root user by executing a malicious command...","description":"Ubilling v1.0.9 allows Remote Command Execution as Root user by executing a malicious command that is injected inside the config file and being triggered by another part of the software.","severity":{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.06561,"percentile":0.93862,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-306","CWE-77","CWE-78"],"published":"2020-12-10T21:38:37Z","modified":"2026-06-17T03:11:12Z","products":[{"vendor":"ubilling","product":"ubilling"}],"references":[{"url":"https://gist.github.com/mhaskar/bfa9c2c799fca6697bcc6a213d08cb3e","tags":["x_refsource_MISC","x_transferred","Exploit","Third Party Advisory"]},{"url":"https://drive.google.com/file/d/1smOjvenPB-nE0PyIxnfujCT4KcxxkeWV/view?usp=sharing","tags":["x_refsource_MISC","x_transferred","Exploit","Third Party Advisory"]},{"url":"https://drive.google.com/file/d/1iLMFSbY8x1CXIf0uFntovY6yZ7N24dQA/view?usp=sharing","tags":["x_refsource_MISC","x_transferred","Exploit","Issue Tracking","Third Party Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-29311"},{"url":"https://github.com/advisories/GHSA-473q-vgvv-5537"}],"sources":{"cve":[{"id":"CVE-2020-29311","description":"Ubilling v1.0.9 allows Remote Command Execution as Root user by executing a malicious command that is injected inside the config file and being triggered by another part of the software.","status":"published","published":"2020-12-10T21:38:37Z","modified":"2024-08-04T16:48:01.634Z","updated_at":"2026-11-02T14:35:55.460269Z"}],"euvd":[{"id":"EUVD-2020-21686","description":"Ubilling v1.0.9 allows Remote Command Execution as Root user by executing a malicious command that is injected inside the config file and being triggered by another part of the software.","status":"published","published":"2020-12-10T21:38:37Z","modified":"2024-08-04T16:48:01Z","updated_at":"2026-11-03T03:07:07.919663Z"}],"ghsa":[{"id":"GHSA-473q-vgvv-5537","title":"Ubilling v1.0.9 allows Remote Command Execution as Root user by executing a malicious command...","description":"Ubilling v1.0.9 allows Remote Command Execution as Root user by executing a malicious command that is injected inside the config file and being triggered by another part of the software.","status":"published","published":"2022-05-24T17:36:06Z","modified":"2023-01-29T05:05:02Z","cwes":["CWE-77"],"updated_at":"2026-11-02T14:45:41.669563Z"}],"nvd":[{"id":"CVE-2020-29311","description":"Ubilling v1.0.9 allows Remote Command Execution as Root user by executing a malicious command that is injected inside the config file and being triggered by another part of the software.","status":"published","published":"2020-12-10T23:15:13.27Z","modified":"2026-06-17T03:11:12.14Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary"},{"version":"2.0","score":10,"vector":"AV:N/AC:L/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary"}],"cwes":["CWE-78","CWE-306"],"updated_at":"2026-11-02T14:06:27.10541Z"}]}}