CVE-2007-1341

Description

include/auth/auth.php in Simple Invoices before 2007 03 05 does not use the login system to protect print preview pages for invoices, which might allow attackers to obtain sensitive information.

References

https://sourceforge.net/project/shownotes.php?group_id=164303&release_id=491300

http://www.securityfocus.com/bid/22818

http://secunia.com/advisories/24402

http://osvdb.org/33860

http://forum.tufat.com/showthread.php?p=116753#post116753

http://code.google.com/p/simpleinvoices/issues/detail?id=35

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

EPSS