CVE-2007-1341

MEDIUM 5.0CVE-2007-1341 · Published 08/03/2007 · updated 16/06/2026

In short

CVE-2007-1341 is a MEDIUM (CVSS 5.0) vulnerability affecting simple invoices (simple invoices).
Chance of exploitation in the next 30 days (EPSS): 1.3%, higher than 70.0% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
simple invoices simple_invoices	`= 2006-12-11= 2007-01-25= 2007-02-02`	No fix yet

Description

include/auth/auth.php in Simple Invoices before 2007 03 05 does not use the login system to protect print preview pages for invoices, which might allow attackers to obtain sensitive information.

References

code.google.com/p/simpleinvoices/issues/detail
forum.tufat.com/showthread.php
osvdb.org/33860
secunia.com/advisories/24402 · Vendor Advisory
securityfocus.com/bid/22818 · Patch
sourceforge.net/project/shownotes.php

More vulnerabilities in simple invoices

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free