← Back

Openinvoice

openinvoice

Vendor: Cale Dunlap • 2 CVEs

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2008-6524
1Cale Dunlap
1Openinvoice
Apr 23, 2026
Mar 25, 2009
N/A· v4
N/A· v3
6.5 MEDIUM· v2
resetpass.php in openInvoice 0.90 beta and earlier allows remote authenticated users to change the passwords of arbitrary users via a modified uid parameter. NOTE: this can be leveraged with a separate vulnerability in...Show more
resetpass.php in openInvoice 0.90 beta and earlier allows remote authenticated users to change the passwords of arbitrary users via a modified uid parameter. NOTE: this can be leveraged with a separate vulnerability in auth.php to modify passwords without authentication.Show less
CVE-2008-6523
1Cale Dunlap
1Openinvoice
Apr 23, 2026
Mar 25, 2009
N/A· v4
N/A· v3
7.5 HIGH· v2
auth.php in openInvoice 0.90 beta and earlier allows remote attackers to bypass authentication and gain privileges by setting the oiauth cookie. NOTE: this can be leveraged with a separate vulnerability in resetpass.php...Show more
auth.php in openInvoice 0.90 beta and earlier allows remote attackers to bypass authentication and gain privileges by setting the oiauth cookie. NOTE: this can be leveraged with a separate vulnerability in resetpass.php to modify passwords for arbitrary users.Show less