CVE-2017-15990

Php Inventory & Invoice Management System allows Arbitrary File Upload via dashboard/editmyaccountdetail/...

CVE-2017-15990

CVE-2017-15990 affects the Php Inventory & Invoice Management System, where an arbitrary file upload is possible via the path dashboard/edit_myaccountdetail/. The connected documents consistently describe an arbitrary file upload vulnerability in this software, with multiple references (NVD entry...

CVE-2017-15990: Unrestricted Upload of File with Dangerous Type

Php Inventory & Invoice Management System allows Arbitrary File Upload via dashboard/editmyaccountdetail/...

Php Inventory - Arbitrary File Upload Vulnerability

Exploit for php platform in category web applications Exploit Title: Php Inventory & Invoice Management System - Arbitrary File Upload Dork: N/A Date: 30.10.2017 Vendor Homepage: http://savsofteproducts.com/ Software Link: http://www.phpinventory.com/ Demo: http://phpinventory.com/phpinventorydem...

Php Inventory - Arbitrary File Upload

Exploit Title: Php Inventory & Invoice Management System - Arbitrary File Upload Dork: N/A Date: 30.10.2017 Vendor Homepage: http://savsofteproducts.com/ Software Link: http://www.phpinventory.com/ Demo: http://phpinventory.com/phpinventorydemo/ Version: N/A Category: Webapps Tested on:...

CVE-2017-15965

The NS Download Shop aka comnsdownloadshop component 2.2.6 for Joomla! allows SQL Injection via the id parameter in an invoice.create action...

CVE-2017-15965

The NS Download Shop aka comnsdownloadshop component 2.2.6 for Joomla! allows SQL Injection via the id parameter in an invoice.create action...

PT-2017-3371

Name of the Vulnerable Software and Affected Versions Php Inventory & Invoice Management System affected versions not specified Description The issue is related to the lack of restrictions on file uploads in the Php Inventory & Invoice Management System. This can be exploited by a remote attacker...

Threat Outbreak Alert RuleID30786: Email Messages Distributing Malicious Software on September 28, 2017

Medium Alert ID: 55410 First Published: 2017 September 28 18:37 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID30786 may contain the following files: Name ...

Threat Outbreak Alert RuleID30706: Email Messages Distributing Malicious Software on September 21, 2017

Medium Alert ID: 55356 First Published: 2017 September 21 13:13 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID30706 may contain the following files: Name ...

Threat Outbreak Alert RuleID30698: Email Messages Distributing Malicious Software on September 19, 2017

Medium Alert ID: 55336 First Published: 2017 September 19 16:10 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID30698 may contain the following files: Name ...

EzInvoice 6.02 - SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: EzInvoice - Invoice Management System 6.0.2 - SQL Injection Dork: N/A Date: 07.09.2017 Vendor Homepage: http://www.mysticdreams.net/ Software Link: http://www.mysticdreams.net/resources/ezinvoicedemo.zip Demo:...

Online Invoice System 3.0 SQL Injection

Exploit Title: Online Invoice System 3.0 - SQL Injection Dork: N/A Date: 07.09.2017 Vendor Homepage: http://www.onlineinvoicesystem.com/ Software Link: http://www.onlineinvoicesystem.com/indexv3.html Demo: http://www.onlineinvoicesystem.com/onlineinvoicesystem3/index.php Version: 3.0 Category:...

Online Invoice System 3.0 - SQL Injection

Online Invoice System 3.0 - SQL Injection Exploit Title: Online Invoice System 3.0 - SQL Injection Dork: N/A Date: 07.09.2017 Vendor Homepage: http://www.onlineinvoicesystem.com/ Software Link: http://www.onlineinvoicesystem.com/indexv3.html Demo:...

Online Invoice System 3.0 - SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Online Invoice System 3.0 - SQL Injection Dork: N/A Date: 07.09.2017 Vendor Homepage: http://www.onlineinvoicesystem.com/ Software Link: http://www.onlineinvoicesystem.com/indexv3.html Demo:...

EzInvoice 6.02 - SQL Injection

EzInvoice 6.02 - SQL Injection Exploit Title: EzInvoice - Invoice Management System 6.0.2 - SQL Injection Dork: N/A Date: 07.09.2017 Vendor Homepage: http://www.mysticdreams.net/ Software Link: http://www.mysticdreams.net/resources/ezinvoicedemo.zip Demo:...

EzInvoice 6.02 - SQL Injection

Exploit Title: EzInvoice - Invoice Management System 6.0.2 - SQL Injection Dork: N/A Date: 07.09.2017 Vendor Homepage: http://www.mysticdreams.net/ Software Link: http://www.mysticdreams.net/resources/ezinvoicedemo.zip Demo: http://www.mysticdreams.net/products/ezinvoice/ Version: 6.0.2 Category:...

Online Invoice System 3.0 - SQL Injection

Exploit Title: Online Invoice System 3.0 - SQL Injection Dork: N/A Date: 07.09.2017 Vendor Homepage: http://www.onlineinvoicesystem.com/ Software Link: http://www.onlineinvoicesystem.com/indexv3.html Demo: http://www.onlineinvoicesystem.com/onlineinvoicesystem3/index.php Version: 3.0 Category:...

Threat Outbreak Alert RuleID30447: Email Messages Distributing Malicious Software on September 4, 2017

Medium Alert ID: 55099 First Published: 2017 September 5 15:00 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID30447 may contain the following files: Name |...

Invoice Manager 3.1 - Cross-Site Request Forgery (Add Admin)

Invoice Manager 3.1 - Cross-Site Request Forgery Add Admin ======================================================== Invoice Manager v3.1 Cross site request forgery Add Admin Description : Invoice Manager v3.1 is vulnerable to CSRF attack No CSRF token in place which if an admin user can be tricke...