{"id":"CVE-2023-30258","aliases":["EUVD-2023-34682","GHSA-4v39-q2jh-wjrw"],"status":"published","title":"Command Injection vulnerability in MagnusSolution magnusbilling 6.x and 7.x allows remote...","description":"Command Injection vulnerability in MagnusSolution magnusbilling 6.x and 7.x allows remote attackers to run arbitrary commands via unauthenticated HTTP request.","severity":{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.9425,"percentile":0.9985,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":false},"cwes":["CWE-77","CWE-78"],"published":"2023-06-23T00:00:00Z","modified":"2026-10-28T02:30:53Z","exploits":[{"source":"exploitdb","id":"EDB-52170","title":"MagnusSolution magnusbilling 7.3.0 - Command Injection","type":"webapps","platform":"multiple","date":"2025-04-11","url":"https://www.exploit-db.com/exploits/52170"},{"source":"metasploit","id":"exploit/linux/http/magnusbilling_unauth_rce_cve_2023_30258","title":"MagnusBilling application unauthenticated Remote Command Execution.","type":"exploit","platform":"Linux,PHP,Unix","date":"2023-06-26","verified":true,"url":"https://www.rapid7.com/db/modules/exploit/linux/http/magnusbilling_unauth_rce_cve_2023_30258"},{"source":"nuclei","id":"CVE-2023-30258","title":"MagnusBilling - Remote Code Execution","type":"detection template","url":"https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-30258.yaml"},{"source":"pocgithub","id":"AdityaBhatt3010/Room-Walkthrough-Billing","title":"AdityaBhatt3010/Room-Walkthrough-Billing","date":"2025-07-13","url":"https://github.com/AdityaBhatt3010/Room-Walkthrough-Billing"},{"source":"pocgithub","id":"CankunWang/Tryhackme_Billing","title":"CankunWang/Tryhackme_Billing","date":"2025-11-05","url":"https://github.com/CankunWang/Tryhackme_Billing"},{"source":"pocgithub","id":"Chocapikk/CVE-2023-30258","title":"Chocapikk/CVE-2023-30258","date":"2025-03-16","url":"https://github.com/Chocapikk/CVE-2023-30258"},{"source":"pocgithub","id":"abdullohqurbon0v/CVE-2023-30258-Exploit-For-Magnus-Billing-System","title":"abdullohqurbon0v/CVE-2023-30258-Exploit-For-Magnus-Billing-System","date":"2025-09-18","url":"https://github.com/abdullohqurbon0v/CVE-2023-30258-Exploit-For-Magnus-Billing-System"},{"source":"pocgithub","id":"cyb3rk0ala/THM-MagnusBilling-CVE-2023-30258-Exploit","title":"cyb3rk0ala/THM-MagnusBilling-CVE-2023-30258-Exploit","date":"2026-04-08","url":"https://github.com/cyb3rk0ala/THM-MagnusBilling-CVE-2023-30258-Exploit"},{"source":"pocgithub","id":"estebanzarate/CVE-2023-30258-Magnus-Billing-v7-Command-Injection-PoC","title":"estebanzarate/CVE-2023-30258-Magnus-Billing-v7-Command-Injection-PoC","date":"2026-02-25","url":"https://github.com/estebanzarate/CVE-2023-30258-Magnus-Billing-v7-Command-Injection-PoC"},{"source":"pocgithub","id":"gy741/CVE-2023-30258-setup","title":"gy741/CVE-2023-30258-setup","date":"2024-01-27","url":"https://github.com/gy741/CVE-2023-30258-setup"},{"source":"pocgithub","id":"kayl22/magnus_billing_7.3.0_RCE_CVE-2023-30258","title":"kayl22/magnus_billing_7.3.0_RCE_CVE-2023-30258","date":"2025-12-07","url":"https://github.com/kayl22/magnus_billing_7.3.0_RCE_CVE-2023-30258"},{"source":"pocgithub","id":"n00o00b/CVE-2023-30258-RCE-POC","title":"n00o00b/CVE-2023-30258-RCE-POC","date":"2025-03-25","url":"https://github.com/n00o00b/CVE-2023-30258-RCE-POC"},{"source":"pocgithub","id":"sk00l/CVE-2023-30258","title":"sk00l/CVE-2023-30258","date":"2025-03-09","url":"https://github.com/sk00l/CVE-2023-30258"},{"source":"pocgithub","id":"tinashelorenzi/CVE-2023-30258-magnus-billing-v7-exploit","title":"tinashelorenzi/CVE-2023-30258-magnus-billing-v7-exploit","date":"2025-03-12","url":"https://github.com/tinashelorenzi/CVE-2023-30258-magnus-billing-v7-exploit"}],"products":[{"vendor":"magnussolution","product":"magnusbilling"}],"references":[{"url":"https://eldstal.se/advisories/230327-magnusbilling.html","tags":["x_transferred","Exploit","Mitigation","Third Party Advisory","advisory"]},{"url":"https://github.com/magnussolution/magnusbilling7/commit/ccff9f6370f530cc41ef7de2e31d7590a0fdb8c3","tags":["x_transferred","Patch","fix"]},{"url":"http://packetstormsecurity.com/files/175672/MagnusBilling-Remote-Command-Execution.html","tags":["x_transferred","web"]},{"url":"https://github.com/MarkLee131/awesome-web-pocs/blob/main/CVE-2023-30258.md","tags":["web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-30258","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-4v39-q2jh-wjrw"},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/30xxx/CVE-2023-30258.json","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2023-30258","description":"Command Injection vulnerability in MagnusSolution magnusbilling 6.x and 7.x allows remote attackers to run arbitrary commands via unauthenticated HTTP request.","status":"published","published":"2023-06-23T00:00:00Z","modified":"2025-08-29T14:58:43.608Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"adp"}],"cwes":["CWE-77"],"updated_at":"2026-11-02T14:35:22.309324Z"}],"euvd":[{"id":"EUVD-2023-34682","description":"Command Injection vulnerability in MagnusSolution magnusbilling 6.x and 7.x allows remote attackers to run arbitrary commands via unauthenticated HTTP request.","status":"published","published":"2023-06-23T00:00:00Z","modified":"2025-08-29T14:58:43Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T20:31:49.600955Z"}],"ghsa":[{"id":"GHSA-4v39-q2jh-wjrw","title":"Command Injection vulnerability in MagnusSolution magnusbilling 6.x and 7.x allows remote...","description":"Command Injection vulnerability in MagnusSolution magnusbilling 6.x and 7.x allows remote attackers to run arbitrary commands via unauthenticated HTTP request.","status":"published","published":"2023-06-23T12:30:18Z","modified":"2025-08-29T15:30:37Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"cwes":["CWE-77","CWE-78"],"updated_at":"2026-11-02T15:03:27.292795Z"}],"nvd":[{"id":"CVE-2023-30258","description":"Command Injection vulnerability in MagnusSolution magnusbilling 6.x and 7.x allows remote attackers to run arbitrary commands via unauthenticated HTTP request.","status":"published","published":"2023-06-23T12:15:09.473Z","modified":"2026-06-17T05:54:23.05Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary"},{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"secondary"}],"cwes":["CWE-78","CWE-77"],"updated_at":"2026-11-02T14:08:12.414559Z"}],"osv":[{"id":"CVE-2023-30258","description":"Command Injection vulnerability in MagnusSolution magnusbilling 6.x and 7.x allows remote attackers to run arbitrary commands via unauthenticated HTTP request.","status":"published","published":"2023-06-23T00:00:00Z","modified":"2026-10-28T02:30:53.484879952Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:44:31.790231Z"}]}}