CVE-2012-4673

SQL injection vulnerability in application/controllers/invoice.php in NeoInvoice might allow remote attackers to execute arbitrary SQL commands via vectors involving the sortcol variable in the listitems function, a different vulnerability than CVE-2012-3477...

CVE-2012-4673

CVE-2012-4673 refers to a SQL injection vulnerability in NeoInvoice, specifically in application/controllers/invoice.php where the sort_col parameter in list_items can be manipulated to cause arbitrary SQL execution. This vulnerability is described as a separate issue from CVE-2012-3477. The link...