nbmember.cgi in Netbilling 2.0 allows remote attackers to obtain sensitive information via the cmd=test option, which can be leveraged to determine the access key.
https://exchange.xforce.ibmcloud.com/vulnerabilities/17865
https://euvd.enisa.europa.eu/vulnerability/EUVD-2004-2722