CVE-2007-3430

Published: Jun 27, 2007Modified: Apr 23, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

SQL injection vulnerability in index.php in Simple Invoices 2007 05 25 allows remote attackers to execute arbitrary SQL commands via the submit parameter in an email action.

Affected (1)

Products: Simple Invoices: Simple Invoices

Simple Invoices

1 product

Simple Invoices

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Simple Invoices Simple Invoices	Version 2007-05-25

References (12)

http://osvdb.org/36293

Source: cve@mitre.org

http://secunia.com/advisories/25789

Source: cve@mitre.org

http://www.securityfocus.com/bid/24601

Source: cve@mitre.org

Exploit

http://www.vupen.com/english/advisories/2007/2310

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/35021

Source: cve@mitre.org

https://www.exploit-db.com/exploits/4098

Source: cve@mitre.org

http://osvdb.org/36293