CVE-2007-4112: Advanced Webhost Billing System

Medium severity, CVSS 6.8. EPSS: 1.1% chance of exploitation in the next 30 days.

Multiple SQL injection vulnerabilities in Advanced Webhost Billing System (AWBS) before 2.6.0, when magic_quotes_gpc is disabled, allow remote attackers to execute arbitrary SQL commands via unspecified vectors. NOTE: this can be leveraged for XSS attacks that "bypass AWBS's anti-XSS input validation."

Affected products

• Advanced Webhost Billing System Advanced Webhost Billing System: up to and including 2.5.1

Published 2007-07-31. Last modified 2026-06-16.