Advanced Webhost Billing System : Security Vulnerabilities, CVEs,
Unspecified vulnerability in Advanced Webhost Billing System (AWBS) before 2.6.0 allows remote authenticated users to obtain configuration data about other dedicated servers via unspecified vectors.
Max CVSS
3.5
EPSS Score
0.16%
Published
2007-07-31
Updated
2008-11-15
Multiple SQL injection vulnerabilities in Advanced Webhost Billing System (AWBS) before 2.6.0, when magic_quotes_gpc is disabled, allow remote attackers to execute arbitrary SQL commands via unspecified vectors. NOTE: this can be leveraged for XSS attacks that "bypass AWBS's anti-XSS input validation."
Max CVSS
6.8
EPSS Score
0.30%
Published
2007-07-31
Updated
2017-07-29
PHP remote file inclusion vulnerability in docs/front-end-demo/cart2.php in Advanced Webhost Billing System (AWBS) 2.4.0 allows remote attackers to execute arbitrary PHP code via a URL in the workdir parameter.
Max CVSS
7.5
EPSS Score
3.68%
Published
2007-04-25
Updated
2017-10-11
3 vulnerabilities found