FOSSBilling Pre-Auth RCE: Unauthenticated Admin Account Creation via Guest API

github.com 2026-06-27查看中文 →

Security AdvisoryHighFOSSBilling

Affected:

FOSSBilling <= 0.7.2

Fixed in:

FOSSBilling 0.8.0

Referenced CVEs: CVE-2026-33543

文章内图片已隐藏以节省流量 · Upgrade to Pro to view images & offline archive

This content was auto-fetched from github.com, cleaned by our LLM pipeline, and translated to English. View original.

More from this source

Class and Exam Timetabling System V1.0 /edit_product.php SQL Injection POC 2026-07-05 Pre-Auth SQL Injection in edit_exam.php of Class and Exam Timetabling System V1.0 with POC 2026-07-05 SQL Injection Vulnerability in Hospital Management System V1.0 edid Parameter 2026-07-05 Hospital Management System V1.0 SQL Injection Vulnerability Advisory 2026-07-05 SQL Injection in edit_coursea.php of Class and Exam Timetabling System V1.0 with PoC 2026-07-05

Offline Archive

Offline screenshot & PDF are Pro-exclusive