CVE-2007-1341

include/auth/auth.php in Simple Invoices before 2007 03 05 does not use the login system to protect print preview pages for invoices, which might allow attackers to obtain sensitive information.

Link	Resource
http://code.google.com/p/simpleinvoices/issues/detail?id=35
http://forum.tufat.com/showthread.php?p=116753#post116753
https://sourceforge.net/project/shownotes.php?group_id=164303&release_id=491300
http://www.securityfocus.com/bid/22818	Patch Vendor Advisory
http://secunia.com/advisories/24402	Vendor Advisory
http://osvdb.org/33860

Configuration 1

cpe:2.3:a:simple_invoices:simple_invoices:2006-12-11:*:*:*:*:*:*:* cpe:2.3:a:simple_invoices:simple_invoices:2007-02-02:*:*:*:*:*:*:* cpe:2.3:a:simple_invoices:simple_invoices:2007-01-25:*:*:*:*:*:*:*

---

Published : 2007-03-08 10:19

Updated : 2008-11-13 06:34

---

NVD link : CVE-2007-1341

Mitre link : CVE-2007-1341

No products.

NVD-CWE-Other