MagnusBilling version 6.x suffers from a PHP code injection vulnerability.