CVE-2005-1054: Moderngigabyte Modernbill

High severity, CVSS 7.5. EPSS: 3.5% chance of exploitation in the next 30 days.

PHP remote file inclusion vulnerability in news.php in ModernBill 4.3.0 and earlier allows remote attackers to execute arbitrary PHP code by modifying the DIR parameter to reference a URL on a remote web server that contains the code.

Affected products

• Moderngigabyte Modernbill: up to and including 4.3.0

Published 2005-05-02. Last modified 2026-06-16.