Threat Outbreak Alert: Fake Order Invoice Update Notification Email Messages on July 16, 2013

Medium Alert ID: 30115 First Published: 2013 July 17 14:17 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a revised order invoice notification for the recipient. The text in the email message attempts to convince the...

Threat Outbreak Alert: Fake Shipping Invoice Notification Email Messages on July 14, 2013

Medium Alert ID: 30084 First Published: 2013 July 15 18:24 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a shipping invoice notification for the recipient. The text in the email message attempts to convince the recipie...

Threat Outbreak Alert: Fake Billing Invoice Statement Email Messages on July 12, 2013

Medium Alert ID: 30055 First Published: 2013 July 12 15:06 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a billing invoice statement for the recipient. The text in the email message attempts to convince the recipient t...

Threat Outbreak Alert: Fake Account Billing Invoice Email Messages on July 11, 2013

Medium Alert ID: 30046 First Published: 2013 July 11 13:53 GMT Last Updated: 2013 July 12 11:41 GMT Version: 2 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain an account billing invoice notification for the recipient. The text in the...

Threat Outbreak Alert: Fake Italian Unpaid Invoice Notification Email Messages on July 10, 2013.

Medium Alert ID: 30028 First Published: 2013 July 11 12:17 GMT Version: 1 Summary Cisco Security has detected significant activity related to Italian-language spam email messages that claim to contain an unpaid invoice notification for the recipient. The text in the email message attempts to...

Threat Outbreak Alert: Fake Invoice Attachment Email Messages on July 5, 2013

Medium Alert ID: 29943 First Published: 2013 July 3 18:36 GMT Last Updated: 2013 July 5 17:02 GMT Version: 2 Summary Cisco Security has detected significant activity related to German-language spam email messages that claim to contain an invoice attachment for the recipient. The text in the email...

Threat Outbreak Alert: Fake Packing Invoice and Shipping Information Email Messages on June 30, 2013

Medium Alert ID: 29867 First Published: 2013 July 1 18:54 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain an invoice and shipment notification for the recipient. The text in the email message attempts to convince the...

Threat Outbreak Alert: Fake Invoice Attachment Email Messages on June 22, 2013

Medium Alert ID: 29751 First Published: 2013 June 24 12:27 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain an invoice attachment for the recipient. The text in the email message attempts to convince the recipient to open...

Threat Outbreak Alert: Fake LexisNexis Invoice Attachment Email Messages on June 21, 2013

Medium Alert ID: 29750 First Published: 2013 June 24 11:50 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain an invoice attachment from LexisNexis for the recipient. The text in the email message attempts to convince the...

Threat Outbreak Alert: Fake Claims Invoice Email Messages on June 17, 2013

Medium Alert ID: 29748 First Published: 2013 June 21 18:48 GMT Version: 1 Summary Cisco Security has detected significant activity related to Portuguese-language spam email messages that claim to contain an invoice notification for the recipient. The text in the email message attempts to convince...

Threat Outbreak Alert: Fake German Invoice Delivery Email Messages on June 21, 2013

Low Alert ID: 29742 First Published: 2013 June 21 13:35 GMT Version: 1 Summary Cisco Security has detected significant activity related to German-language spam email messages that claim to contain an invoice delivery notification for the recipient. The text in the email message attempts to convin...

WHMCS 4.5.2 SQL Injection

Title: WHMCS 4.x SQL Injection Vulnerability Google Dork: intext:"Powered by WHMCompleteSolution" OR inurl:"submitticket.php‎"‎ Author: Ahmed Aboul-Ela Contact: Ahmed.Aboul3laatgmaildotcom Date: 14/5/2013 Vendor: http://www.whmcs.com Version: 4.5.2 and perior versions should be affected too Teste...

CVE-2012-4932

Multiple cross-site scripting XSS vulnerabilities in SimpleInvoices before stable-2012-1-CIS3000 allow remote attackers to inject arbitrary web script or HTML via 1 the having parameter in a manage action to index.php; 2 the Email field in an Add User action; 3 the Customer Name field in an Add...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in SimpleInvoices before stable-2012-1-CIS3000 allow remote attackers to inject arbitrary web script or HTML via 1 the having parameter in a manage action to index.php; 2 the Email field in an Add User action; 3 the Customer Name field in an Add...

CVE-2012-4932

Multiple cross-site scripting XSS vulnerabilities in SimpleInvoices before stable-2012-1-CIS3000 allow remote attackers to inject arbitrary web script or HTML via 1 the having parameter in a manage action to index.php; 2 the Email field in an Add User action; 3 the Customer Name field in an Add...

SimpleInvoices 2011.1 Cross-Site-Scripting (XSS) Vulnerabilities CVE-2012-4932

Overview SimpleInvoices 2011.1 is vulnerable to Cross-site Scripting XSS. Software Description Simple Invoices is a free, open source, web based invoicing system that you can install on your server/pc or have hosted by one of our services providers. Vulnerability Overview The vulnerabilities POC...

SimpleInvoices 2011.1 Cross Site Scripting

Overview SimpleInvoices 2011.1 is vulnerable to Cross-site Scripting XSS. Software Description Simple Invoices is a free, open source, web based invoicing system that you can install on your server/pc or have hosted by one of our services providers. Vulnerability Overview The vulnerabilities POC...

Threat Outbreak Alert: Fake Invoice Statement Attachment Email Messages on April 15, 2014

Medium Alert ID: 27077 First Published: 2012 October 1 21:39 GMT Last Updated: 2014 April 16 11:23 GMT Version: 78 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain an invoice statement for the recipient. The text in the email message...

Sql injection

Multiple SQL injection vulnerabilities in application/core/MYModel.php in MyClientBase 0.12 allow remote attackers to execute arbitrary SQL commands via the 1 invoicenumber or 2 tags parameter to index.php/invoicesearch...

PT-2012-5035

Name of the Vulnerable Software and Affected Versions MyClientBase version 0.12 Description The issue concerns SQL injection vulnerabilities that allow remote attackers to execute arbitrary SQL commands. This can be achieved via the invoice number or tags parameter to the "index.php/invoice searc...