high7.5Public exploit code
CVE-2007-3430
SQL injection vulnerability in index.php in Simple Invoices 2007 05 25 allows remote attackers to execute arbitrary SQL commands via the submit parameter in an…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Simple Invoices 2007 05 25 - 'index.php?submit' SQL Injection2007-06-24 · webapps · php · Verified
Impact
SQL injection vulnerability in index.php in Simple Invoices 2007 05 25 allows remote attackers to execute arbitrary SQL commands via the submit parameter in an email action.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Simple Invoices | Simple Invoices | Version 2007-05-25 |
References
- NVD record
- CVE.org record
- http://osvdb.org/36293
- http://secunia.com/advisories/25789
- http://www.securityfocus.com/bid/24601
- http://www.vupen.com/english/advisories/2007/2310
- https://exchange.xforce.ibmcloud.com/vulnerabilities/35021
- https://www.exploit-db.com/exploits/4098
- http://osvdb.org/36293
- http://secunia.com/advisories/25789
- http://www.securityfocus.com/bid/24601
- http://www.vupen.com/english/advisories/2007/2310
- https://exchange.xforce.ibmcloud.com/vulnerabilities/35021
- https://www.exploit-db.com/exploits/4098