Total vulnerabilities in the database
include/auth/auth.php in Simple Invoices before 2007 03 05 does not use the login system to protect print preview pages for invoices, which might allow attackers to obtain sensitive information.
Software | From | Fixed in |
---|---|---|
simple_invoices / simple_invoices | 2006-12-11 | 2006-12-11.x |
simple_invoices / simple_invoices | 2007-02-02 | 2007-02-02.x |
simple_invoices / simple_invoices | 2007-01-25 | 2007-01-25.x |