Dilipmallavarapu

**Name of the Vulnerable Software and Affected Versions** FOSSBilling versions 0.6.10 through 0.7.2 **Description** An issue exists in the `Config::prettyPrintArrayToPHP()` method where string values are written into the `config.php` file without escaping single quotes during configuration updates. Since `config.php` is loaded via a bare `include` on every HTTP request, an attacker with admin privileges can inject arbitrary PHP code that executes on every subsequent request. **Recommendations** Update to version 0.8.0. Restrict admin access to trusted personnel only. Audit `config.php` for unexpected PHP code. Restrict access to admin API endpoints that modify configuration at the reverse proxy or WAF level.

**Name of the Vulnerable Software and Affected Versions** FOSSBilling versions prior to 0.8.0 **Description** An unauthenticated mass assignment issue exists in the client self-registration endpoint. This allows a visitor to assign themselves to an arbitrary client group during the sign-up process. Since client groups can control promo code eligibility, an attacker could potentially apply group-restricted discount codes to obtain unauthorized discounts. Mass assignment is a vulnerability where an application takes user-provided data and binds it to an internal object without proper filtering, allowing the user to modify fields they should not have access to. **Recommendations** Update to version 0.8.0. Remove group restrictions from promo codes. Disable client self-registration via Settings → Clients → Disable signup.

**Name of the Vulnerable Software and Affected Versions** FOSSBilling versions prior to 0.8.0 **Description** A race condition in the cart checkout flow allows an authenticated client to apply a promo code more times than its configured maximum limit. By sending concurrent checkout requests before the system can increment the usage count for any single request, a client can obtain unlimited discounted or free orders using a single-use or limited-use promo code. **Recommendations** Update to version 0.8.0. Disable promo codes entirely until a patch is available. Monitor the `promo` table for `used` values exceeding `maxuses` and manually review affected orders.