References https://www.exploit-db.com/exploits/52170 https://github.com/MarkLee131/awesome-web-pocs/blob/main/CVE-2023-30258.md https://attackerkb.com/topics/DFUJhaM5dL/cve-2023-30258 https://nvd.nist.gov/vuln/detail/CVE-2023-30258 https://www.rapid7.com/db/modules/exploit/linux/http/magnusbilling_unauth_rce_cve_2023_30258/ https://savneet-singh.medium.com/from-magnusbilling-rce-to-root-chaining-cve-2023-30258-with-fail2ban-privilege-escalation-d0037628ed46 https://sploitus.com/exploit?id=82344D7F-45DE-547C-BC1F-87996F370E36 https://rules.evebox.org/pub/et/open/2049247 https://access.redhat.com/security/cve/cve-2023-30258 https://eldstal.se/advisories/230327-magnusbilling.html https://www.cve.org/CVERecord?id=CVE-2023-30258 https://github.com/rapid7/metasploit-framework/blob/master//modules/exploits/linux/http/magnusbilling_unauth_rce_cve_2023_30258.rb https://s4e.io/tools/magnusbilling-6x-7x-unauthenticated-remote-code-execution-cve-2023-30258 https://app.opencve.io/cve/CVE-2023-30258 https://www.h3c.com/cn/d_202401/2018189_30005_0.htm
Related VulnerabilitiesMagnusBilling /mbilling/index.php/authentication/login 默认口令漏洞MagnusBilling登录日志存在存储型XSS(CVE-2025-2609)MagnusBilling存在默认口令PoCCVE-2023-30258: MagnusBilling - Remote Code ExecutionPoCCVE-2025-2609: MagnusBilling Login Logs - Cross-Site ScriptingPoCCVE-2025-2610: MagnusBilling Alarm Module - Cross-Site ScriptingPoCmagnusbilling-default-login: MagnusBilling - Default LoginMagnusBilling /mbilling/lib/icepay/icepay.php 命令执行漏洞 (CVE-2023-30258)MagnusSolution Magnusbilling命令执行漏洞(CVE-2023-30258)