magnussolution/magnusbilling7

Releases8

Frequency4 months 3 weeks

Last Release almost 6 years ago

Stars332

MagnusBilling is a fast, secure, efficient, high availability, VOIP Billing.

CVE History

CVE	Published	CVSS v3	CVSS v2
CVE-2025-52289 ↗	Jul 31, 2025Thursday, 31 July 2025, 15:15	8 HIGH	—
A Broken Access Control vulnerability in MagnusBilling v7.8.5.3 allows newly registered users to gain escalated privileges by sending a crafted request to /mbilling/index.php/user/save to set their account status fom "pending" to "active" without requiring administrator approval.
CVE-2023-30258 ↗	Jun 23, 2023Friday, 23 June 2023, 12:15	9.8 CRITICAL	—
Command Injection vulnerability in MagnusSolution magnusbilling 6.x and 7.x allows remote attackers to run arbitrary commands via unauthenticated HTTP request.