Lucene search

K
cve[email protected]CVE-2007-3430
HistoryJun 27, 2007 - 12:30 a.m.

CVE-2007-3430

2007-06-2700:30:00
web.nvd.nist.gov
22
cve
2007
3430
sql injection
simple invoices

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

8.4 High

AI Score

Confidence

Low

0.008 Low

EPSS

Percentile

82.0%

SQL injection vulnerability in index.php in Simple Invoices 2007 05 25 allows remote attackers to execute arbitrary SQL commands via the submit parameter in an email action.

Affected configurations

NVD
Node
simple_invoicessimple_invoicesMatch2007-05-25

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

8.4 High

AI Score

Confidence

Low

0.008 Low

EPSS

Percentile

82.0%

Related for CVE-2007-3430