Simple Invoices 2007 05 25 - 'index.php?submit' SQL Injection

Homepage: http://devilteam.eu/ 126 $result.=" ."; else $result.=" ".$string$i; if strlendechexord$string$i==2 $exa.=" ".dechexord$string$i; else $exa.=" 0".dechexord$string$i; $cont++;if $cont==15 $cont=0; $result.="\r\n"; $exa.="\r\n"; return $exa."\r\n".$resu...

Simple Invoices 2007 05 25 (index.php submit) SQL Injection Exploit

Exploit for unknown platform in category web applications =================================================================== Simple Invoices 2007 05 25 index.php submit SQL Injection Exploit =================================================================== 126 $result.=" ."; else $result.="...

Information disclosure

include/auth/auth.php in Simple Invoices before 2007 03 05 does not use the login system to protect print preview pages for invoices, which might allow attackers to obtain sensitive information...

CVE-2007-1341

include/auth/auth.php in Simple Invoices before 2007 03 05 does not use the login system to protect print preview pages for invoices, which might allow attackers to obtain sensitive information...

CVE-2007-1341

include/auth/auth.php in Simple Invoices before 2007 03 05 does not use the login system to protect print preview pages for invoices, which might allow attackers to obtain sensitive information...

CVE-2007-1341: Undefined Security Weakness

include/auth/auth.php in Simple Invoices before 2007 03 05 does not use the login system to protect print preview pages for invoices, which might allow attackers to obtain sensitive information...

CVE-2007-1341

The CVE-2007-1341 entry concerns Simple Invoices prior to 2007-03-05, where include/auth/auth.php does not enforce login protection on invoice print preview pages, potentially allowing an attacker to access sensitive information. Affected component: the auth print-preview workflow in Simple Invoi...

Remote file inclusion

PHP remote file inclusion vulnerability in controller.php in Simple Invoices before 20070202 allows remote attackers to execute arbitrary PHP code via a URL in the 1 module or 2 view parameter. NOTE: some of these details are obtained from third party information...

CVE-2007-0787

PHP remote file inclusion vulnerability in controller.php in Simple Invoices before 20070202 allows remote attackers to execute arbitrary PHP code via a URL in the 1 module or 2 view parameter. NOTE: some of these details are obtained from third party information...

CVE-2007-0787

CVE-2007-0787 describes a PHP remote file inclusion vulnerability in controller.php of the Simple Invoices application, before version 20070202. The flaw allows an attacker to execute arbitrary PHP code by supplying a URL in the module or view parameter. The underlying issue is improper handling ...

CVE-2007-0787: Undefined Security Weakness

PHP remote file inclusion vulnerability in controller.php in Simple Invoices before 20070202 allows remote attackers to execute arbitrary PHP code via a URL in the 1 module or 2 view parameter. NOTE: some of these details are obtained from third party information...