Description
MagnusBilling 是 Asterisk 的免费计费开源软件。MagnuxSolution 6.x 和 7.x 中存在命令注入漏洞允许远程攻击者通过未验证的HTTP请求执行任意命令。攻击者可通过该漏洞在服务器端任意执行代码，写入后门，获取服务器权限，进而控制整个web服务器。
MagnusBilling /mbilling/lib/icepay/icepay.php 命令执行漏洞 （CVE-2023-30258）
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://nvd.nist.gov/vuln/detail/CVE-2023-30258
https://www.exploit-db.com/exploits/52170
https://www.rapid7.com/db/modules/exploit/linux/http/magnusbilling_unauth_rce_cve_2023_30258/
https://eldstal.se/advisories/230327-magnusbilling.html
https://github.com/estebanzarate/CVE-2023-30258-Magnus-Billing-v7-Command-Injection-PoC
https://attackerkb.com/topics/DFUJhaM5dL/cve-2023-30258
https://savneet-singh.medium.com/from-magnusbilling-rce-to-root-chaining-cve-2023-30258-with-fail2ban-privilege-escalation-d0037628ed46
http://packetstormsecurity.com/files/175672/MagnusBilling-Remote-Command-Execution.html