Description
SQL injection vulnerability in index.php in Simple Invoices 2007 05 25 allows remote attackers to execute arbitrary SQL commands via the submit parameter in an email action.
Metrics
CVSS 2.0 7.5/10
AV:N/AC:L/Au:N/C:P/I:P/A:PAffected software
No affected versions have been published.
Timeline
- Published
- Jun 27, 2007
- Last modified
- Jun 16, 2026
- NVD status
- Modified