CVE-2007-2272: Advanced Webhost Billing System

High severity, CVSS 7.5. EPSS: 6% chance of exploitation in the next 30 days.

PHP remote file inclusion vulnerability in docs/front-end-demo/cart2.php in Advanced Webhost Billing System (AWBS) 2.4.0 allows remote attackers to execute arbitrary PHP code via a URL in the workdir parameter.

Affected products

• Advanced Webhost Billing System Advanced Webhost Billing System: version 2.4.0 only

Published 2007-04-25. Last modified 2026-06-16.