← Back

Cale Dunlap

cale_dunlap

2 CVEs • 1 product

Products (1)

Click to collapse
Toggle
Openinvoice
openinvoice
2 CVEs

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2008-6524
1Cale Dunlap
1Openinvoice
Apr 23, 2026
Mar 25, 2009
N/A· v4
N/A· v3
6.5 MEDIUM· v2
resetpass.php in openInvoice 0.90 beta and earlier allows remote authenticated users to change the passwords of arbitrary users via a modified uid parameter. NOTE: this can be leveraged with a separate vulnerability in...Show more
resetpass.php in openInvoice 0.90 beta and earlier allows remote authenticated users to change the passwords of arbitrary users via a modified uid parameter. NOTE: this can be leveraged with a separate vulnerability in auth.php to modify passwords without authentication.Show less
CVE-2008-6523
1Cale Dunlap
1Openinvoice
Apr 23, 2026
Mar 25, 2009
N/A· v4
N/A· v3
7.5 HIGH· v2
auth.php in openInvoice 0.90 beta and earlier allows remote attackers to bypass authentication and gain privileges by setting the oiauth cookie. NOTE: this can be leveraged with a separate vulnerability in resetpass.php...Show more
auth.php in openInvoice 0.90 beta and earlier allows remote attackers to bypass authentication and gain privileges by setting the oiauth cookie. NOTE: this can be leveraged with a separate vulnerability in resetpass.php to modify passwords for arbitrary users.Show less