CVE-2008-2903: Awbs Advanced Webhost Billing System

Medium severity, CVSS 6.8. EPSS: 0.9% chance of exploitation in the next 30 days.

SQL injection vulnerability in news.php in Advanced Webhost Billing System (AWBS) 2.3.3 through 2.7.1, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the viewnews parameter.

Affected products

• Awbs Advanced Webhost Billing System: version 2.3.3 only; version 2.5 only; version 2.6.3 only; version 2.7 only; version 2.7.1 only

Published 2008-06-30. Last modified 2026-06-16.