CVE-2007-3306

published 2007-06-21

CVE-2007-3306: PHP remote file inclusion vulnerability in crontab/run_billing.php in MiniBill 1.2.5 allows remote attackers to execute arbitrary PHP code via a URL in the…

Priority P3 54 high 7.5 CVSS 2.0

AV N AC L Au N C P I P A P

EXPLOIT

PHP remote file inclusion vulnerability in crontab/run_billing.php in MiniBill 1.2.5 allows remote attackers to execute arbitrary PHP code via a URL in the config[include_dir] parameter, a different vector than CVE-2006-4489.

Affected

1 ranges

Vendor	Product	Version range	Fixed in
ultrize	minibill	—	—

Detection & IOCs extracted from sources · hover to see the quote

path /crontab/run_billing.php↗

url site.com/crontab/run_billing.php?config[include_dir]=Evil-script.txt?↗

• → Monitor HTTP requests targeting /crontab/run_billing.php with a URL-like value in the config[include_dir] parameter, indicating remote file inclusion attempt. ↗
• → The RFI payload appends a trailing '?' to the injected URL (e.g., Evil-script.txt?) to nullify any appended file extension in the inclusion call; look for this pattern in web server logs. ↗

• · This vulnerability is specific to MiniBill version 1.2.5 and is a different attack vector from the previously known CVE-2006-4489 affecting the same product. ↗

CVEs like this are exactly what “Exploited This Week” covers.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.