CVE-2017-1000466

Invoice Ninja version 3.8.1 is vulnerable to stored cross-site scripting vulnerability, within the invoice creation page, which can result in disruption of service and execution of javascript code...

CVE-2017-1000466

CVE-2017-1000466 concerns Invoice Ninja v3.8.1, where a stored cross-site scripting (XSS) vulnerability exists on the invoice creation page. The underlying issue is embedded script execution triggered by user-supplied content, enabling potential disruption of service and JavaScript execution with...

Invoice Ninja Cross-Site Scripting Vulnerability

Invoice Ninja is an open source financial system. The system is able to provide invoicing, collection and other functions. A cross-site scripting vulnerability exists in the invoice creation page in Invoice Ninja version 3.8.1. A remote attacker can exploit this vulnerability to cause a denial of...

Threat Outbreak Alert RuleID31671: Email Messages Distributing Malicious Software on December 25, 2017

Medium Alert ID: 56328 First Published: 2018 January 2 12:54 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID31671 may contain the following files: Name |...

Threat Outbreak Alert RuleID31644: Email Messages Distributing Malicious Software on December 15, 2017

Medium Alert ID: 56280 First Published: 2017 December 15 17:48 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID31644 may contain the following files: Name |...

Threat Outbreak Alert RuleID31632: Email Messages Distributing Malicious Software on December 15, 2017

Medium Alert ID: 56275 First Published: 2017 December 15 15:04 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID31632 may contain the following files: Name |...

Invoice – BizXpert - External URLs, SD-card access, Suspicious files vulnerabilities

HackApp vulnerability scanner discovered that application Invoice – BizXpert published at the 'play' market has multiple vulnerabilities...

Cloudflare: Cloudflare does not sufficiently truncate credit card numbers in invoices

When a Cloudflare user has a paid account, but Cloudflare can't process the user's credit card, Cloudflare emails the user from [email protected], subject line "Cloudflare Failed Taking Payment for INV-D1234567". The email contains an attachment, "2017-11-19CloudflareINV-D1234567.pdf", a PDF...

Threat Outbreak Alert RuleID31357: Email Messages Distributing Malicious Software on November 20, 2017

Medium Alert ID: 55981 First Published: 2017 November 20 16:37 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID31357 may contain the following files: Name |...

Threat Outbreak Alert RuleID31178: Email Messages Distributing Malicious Software on November 1, 2017

Medium Alert ID: 55748 First Published: 2017 November 1 15:02 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID31178 may contain the following files: Name |...

NS Download Shop Component SQL Injection Vulnerability in Joomla!

Joomla! is the U.S. Open Source Matters team developed a set of open source content management system CMS, the system provides RSS feeds, site search and other functions. NS Download Shop also known as comnsdownloadshop component is used in one of the download component. A SQL injection...

Php Inventory Arbitrary File Upload Vulnerability

Php Inventory&Invoice Management System is a sales management system. The system features inventory management, invoice management and user management. An arbitrary file upload vulnerability exists in Php Inventory&Invoice Management System. An attacker can exploit this vulnerability to upload...

Design/Logic Flaw

Php Inventory & Invoice Management System allows Arbitrary File Upload via dashboard/editmyaccountdetail/...

CVE-2017-15990

CVE-2017-15990 affects the Php Inventory & Invoice Management System, where an arbitrary file upload is possible via the path dashboard/edit_myaccountdetail/. The connected documents consistently describe an arbitrary file upload vulnerability in this software, with multiple references (NVD entry...

CVE-2017-15990

Php Inventory & Invoice Management System allows Arbitrary File Upload via dashboard/editmyaccountdetail/...

Php Inventory - Arbitrary File Upload Vulnerability

Exploit for php platform in category web applications Exploit Title: Php Inventory & Invoice Management System - Arbitrary File Upload Dork: N/A Date: 30.10.2017 Vendor Homepage: http://savsofteproducts.com/ Software Link: http://www.phpinventory.com/ Demo: http://phpinventory.com/phpinventorydem...

Php Inventory - Arbitrary File Upload

Exploit Title: Php Inventory & Invoice Management System - Arbitrary File Upload Dork: N/A Date: 30.10.2017 Vendor Homepage: http://savsofteproducts.com/ Software Link: http://www.phpinventory.com/ Demo: http://phpinventory.com/phpinventorydemo/ Version: N/A Category: Webapps Tested on:...

CVE-2017-15965

The NS Download Shop aka comnsdownloadshop component 2.2.6 for Joomla! allows SQL Injection via the id parameter in an invoice.create action...

CVE-2017-15965

The NS Download Shop aka comnsdownloadshop component 2.2.6 for Joomla! allows SQL Injection via the id parameter in an invoice.create action...

Threat Outbreak Alert RuleID30786: Email Messages Distributing Malicious Software on September 28, 2017

Medium Alert ID: 55410 First Published: 2017 September 28 18:37 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID30786 may contain the following files: Name ...