Advisories · Technology
hotspotbilling phpnuxbill.
Every CVE that names hotspotbilling phpnuxbill among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 9.3 CriticalCritical · CVSS 9+
PHPNuxBill through 2025.3.20 Account Takeover via Brute-Forceable Password Reset Code
- hotspotbilling phpnuxbill
- Authentication bypass
- CVSS 7.1 High
PHPNuxBill through 2025.3.20 CHAP Authentication Bypass via Password::chap_verify()
- hotspotbilling phpnuxbill
- Authentication bypass
- CVSS 9.3 CriticalCritical · CVSS 9+
PHPNuxBill through 2025.3.20 Unauthenticated SQL Injection via radius.php
- hotspotbilling phpnuxbill
- SQL injection