Description
SQL injection vulnerability in index.php in Simple Invoices 2007 05 25 allows remote attackers to execute arbitrary SQL commands via the submit parameter in an email action.
Metrics
CVSS 2.0 7.5/10
AV:N/AC:L/Au:N/C:P/I:P/A:PAffected software
| Vendor | Product | Versions |
|---|---|---|
| n/a | n/a | n/a |
References
- http://osvdb.org/36293
- http://secunia.com/advisories/25789
- http://www.securityfocus.com/bid/24601Exploit
- http://www.vupen.com/english/advisories/2007/2310
- https://exchange.xforce.ibmcloud.com/vulnerabilities/35021
- https://www.exploit-db.com/exploits/4098
- http://osvdb.org/36293
- http://secunia.com/advisories/25789
- http://www.securityfocus.com/bid/24601Exploit
- http://www.vupen.com/english/advisories/2007/2310
- https://exchange.xforce.ibmcloud.com/vulnerabilities/35021
- https://www.exploit-db.com/exploits/4098
Timeline
- Published
- Jun 27, 2007
- Last modified
- Jun 16, 2026
- NVD status
- Modified