CVE-2025-52289 Information
Aug 01, 2025
cve
Description
A Broken Access Control vulnerability in MagnusBilling v7.8.5.3 allows newly registered users to gain escalated privileges by sending a crafted request to /mbilling/index.php/user/save to set their account status fom \pending\ to ctive\ without requiring administrator approval.
Reference
https://github.com/Madhav-Bhardwaj/CVE-2025-52289 https://github.com/magnussolution/magnusbilling7/commit/f886330e9e9216a3830775610a4a83f970c08e8d
Related CNNVD
CNNVD-202507-3922 (Published: 2025-07-31)
Share on: