Vulnerabilities > CVE-2007-1341 - Unspecified vulnerability in Simple Invoices Simple Invoices 20061211/20070125/20070202
Attack vector
UNKNOWN Attack complexity
UNKNOWN Privileges required
UNKNOWN Confidentiality impact
UNKNOWN Integrity impact
UNKNOWN Availability impact
UNKNOWN Summary
include/auth/auth.php in Simple Invoices before 2007 03 05 does not use the login system to protect print preview pages for invoices, which might allow attackers to obtain sensitive information.
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Application | 3 |
References
- http://code.google.com/p/simpleinvoices/issues/detail?id=35
- http://code.google.com/p/simpleinvoices/issues/detail?id=35
- http://forum.tufat.com/showthread.php?p=116753#post116753
- http://forum.tufat.com/showthread.php?p=116753#post116753
- http://osvdb.org/33860
- http://osvdb.org/33860
- http://secunia.com/advisories/24402
- http://secunia.com/advisories/24402
- http://www.securityfocus.com/bid/22818
- http://www.securityfocus.com/bid/22818
- https://sourceforge.net/project/shownotes.php?group_id=164303&release_id=491300
- https://sourceforge.net/project/shownotes.php?group_id=164303&release_id=491300