Vulnerabilities
Critical SQL Injection Flaw Found in PHPNuxBill FreeRADIUS Endpoint
An unauthenticated SQL injection vulnerability in PHPNuxBill allows attackers to extract customer data and credentials via crafted requests.
PHPNuxBill
Everything Threat Times has reported about PHPNuxBill: 2 stories, newest first. Part of our Vulnerabilities coverage.
Vulnerabilities
Critical Account Takeover Flaw Found in PHPNuxBill Password Reset Flow
Unauthenticated attackers can brute-force OTP codes in PHPNuxBill to hijack customer accounts without triggering lockouts or rate limits.