CVE-2020-29311 | BDVDB-2026-145739 Detail

Description#

Ubilling v1.0.9 allows Remote Command Execution as Root user by executing a malicious command that is injected inside the config file and being triggered by another part of the software.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://gist.github.com/mhaskar/bfa9c2c799fca6697bcc6a213d08cb3e
https://drive.google.com/file/d/1smOjvenPB-nE0PyIxnfujCT4KcxxkeWV/view?usp=sharing
https://drive.google.com/file/d/1iLMFSbY8x1CXIf0uFntovY6yZ7N24dQA/view?usp=sharing

Exploit#

No public exploit known

History#

Version 12020-12-10Record published in the CVE List.
Version 22024-08-04Most recent update recorded in the CVE List.