MagnusBilling version 7.x suffers from a remote command injection vulnerability.