CVE-2015-4382

CVE-2015-4382 refers to CSRF vulnerabilities in the Drupal Invoice contributed module. Impacted versions are 6.x-1.x prior to 6.x-1.2 and 7.x-1.x prior to 7.x-1.3, allowing remote attackers to hijack the authentication of arbitrary users to perform invoices-related actions (create, delete, or alt...

PT-2015-6564

Name of the Vulnerable Software and Affected Versions Drupal Invoice module versions 6.x-1.x before 6.x-1.2 Drupal Invoice module versions 7.x-1.x before 7.x-1.3 Description The issue allows remote attackers to hijack the authentication of arbitrary users for requests that create, delete, or alte...

CVE-2015-4382: Cross-Site Request Forgery (CSRF)

Multiple cross-site request forgery CSRF vulnerabilities in the Invoice module 6.x-1.x before 6.x-1.2 and 7.x-1.x before 7.x-1.3 for Drupal allow remote attackers to hijack the authentication of arbitrary users for requests that 1 create, 2 delete, or 3 alter invoices via unspecified vectors...

PT-2015-6563

Name of the Vulnerable Software and Affected Versions Drupal Invoice module versions 6.x-1.x before 6.x-1.2 Drupal Invoice module versions 7.x-1.x before 7.x-1.3 Description A cross-site scripting XSS issue exists in the Invoice module for Drupal, allowing remote authenticated users with the...

CVE-2015-4381: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the Invoice module 6.x-1.x before 6.x-1.2 and 7.x-1.x before 7.x-1.3 for Drupal allows remote authenticated users with the "Administer own invoices" permission to inject arbitrary web script or HTML via unspecified vectors involving nodes of the "Invoice"...

Threat Outbreak Alert RuleID4626: Email Messages Distributing Malicious Software on January 27, 2016

Medium Alert ID: 39317 First Published: 2015 June 11 17:35 GMT Last Updated: 2016 January 28 13:48 GMT Version: 63 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID4626KVR...

Threat Outbreak Alert RuleID15593: Email Messages Distributing Malicious Software on May 29, 2015

Medium Alert ID: 39121 First Published: 2015 May 30 02:13 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID15593 may contain the following files: Name | Size...

Threat Outbreak Alert RuleID15580: Email Messages Distributing Malicious Software on May 28, 2015

Medium Alert ID: 39055 First Published: 2015 May 29 13:47 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID15580 may contain the following files: Name | Size...

SQL injection vulnerability in the id parameter of Ticketmaster ERP web-based ticketing system/Finance/Invoice_detail.aspx?id=.

Ltd. Ticketmaster ERP management system is a special ticket management system for air ticket agents, integrating online booking management, telephone recording screen, corporate travel management, order management in the same industry, membership management, points management, SMS sending, staff...

Threat Outbreak Alert RuleID15433: Email Messages Distributing Malicious Software on May 21, 2015

Medium Alert ID: 38956 First Published: 2015 May 22 12:54 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID15433 may contain the following files: Name | Size...

Drupal Invoice Module Cross-Site Request Forgery Vulnerability

Drupal is a free and open source content management system developed in PHP. A cross-site request forgery vulnerability exists in Drupal Invoice, which allows remote attackers to construct malicious URIs, trick users into parsing them, and can target user contexts to perform malicious actions...

Simple Invoice 2011.1 Cross Site Request Forgery

Affected software: simple invoice Type of vulnerability:adding admin user via csrf URL:simpleinvoices.org Discovered by: provensec Website: provensec.com version:2011.1 Proof of concept...

Simple Invoice 2011 Cross Site Scripting

Affected software: simple invoice Type of vulnerability:stored xss URL:simpleinvoices.org Discovered by: provensec Website: provensec.com version:2011 Proof of concept goto http://demo.simpleinvoices.org/index.php?module=paymenttypes&view=manage add new or edit some older payment type and fill th...

Threat Outbreak Alert RuleID15224: Email Messages Distributing Malicious Software on May 11, 2015

Medium Alert ID: 38784 First Published: 2015 May 12 19:59 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID15224 may contain the following files: Name | Size...

Threat Outbreak Alert RuleID15144: Email Messages Distributing Malicious Software on May 7, 2015

Medium Alert ID: 38736 First Published: 2015 May 8 14:14 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID15144 may contain the following files: Name | Size ...

Threat Outbreak Alert RuleID15074: Email Messages Distributing Malicious Software on May 5, 2015

Medium Alert ID: 38664 First Published: 2015 May 4 18:47 GMT Last Updated: 2015 May 6 12:24 GMT Version: 2 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID15074 and...

Threat Outbreak Alert RuleID15071: Email Messages Distributing Malicious Software on May 4, 2015

Medium Alert ID: 38661 First Published: 2015 May 4 18:47 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID15071 may contain the following files: Name | Size ...

Threat Outbreak Alert RuleID14415: Email Messages Distributing Malicious Software on April 1, 2015

Medium Alert ID: 38161 First Published: 2015 April 1 13:07 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID14415 may contain the following files: Name | Siz...

Threat Outbreak Alert RuleID14385: Email Messages Distributing Malicious Software on March 31, 2015

Medium Alert ID: 38133 First Published: 2015 March 31 18:01 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID14385 may contain the following files: Name | Si...

Threat Outbreak Alert RuleID14322: Email Messages Distributing Malicious Software on March 30, 2015

Medium Alert ID: 38094 First Published: 2015 March 30 13:32 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID14322 may contain the following files: Name | Si...