CVE-2007-1341

Published: Mar 8, 2007Modified: Apr 23, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

include/auth/auth.php in Simple Invoices before 2007 03 05 does not use the login system to protect print preview pages for invoices, which might allow attackers to obtain sensitive information.

Affected (3)

Products: Simple Invoices: Simple Invoices

Simple Invoices

1 product

Simple Invoices

Configuration A

3 vulnerable

Vulnerable Software	Affected Versions
Simple Invoices Simple Invoices	Version 2006-12-11
Simple Invoices Simple Invoices	Version 2007-01-25
Simple Invoices Simple Invoices	Version 2007-02-02

References (12)

http://code.google.com/p/simpleinvoices/issues/detail?id=35

Source: cve@mitre.org

http://forum.tufat.com/showthread.php?p=116753#post116753

Source: cve@mitre.org

http://osvdb.org/33860

Source: cve@mitre.org

http://secunia.com/advisories/24402

Source: cve@mitre.org

Vendor Advisory

http://www.securityfocus.com/bid/22818

Source: cve@mitre.org

PatchVendor Advisory

https://sourceforge.net/project/shownotes.php?group_id=164303&release_id=491300

Source: cve@mitre.org

http://code.google.com/p/simpleinvoices/issues/detail?id=35