CVE-2008-6523

HIGH 7.5CVE-2008-6523 · Published 25/03/2009 · updated 16/06/2026

In short

CVE-2008-6523 is a HIGH (CVSS 7.5) vulnerability affecting openinvoice (cale dunlap).
Chance of exploitation in the next 30 days (EPSS): 2.6%, higher than 85.2% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
openinvoice cale_dunlap	`= 0.90`	No fix yet

Description

auth.php in openInvoice 0.90 beta and earlier allows remote attackers to bypass authentication and gain privileges by setting the oiauth cookie. NOTE: this can be leveraged with a separate vulnerability in resetpass.php to modify passwords for arbitrary users.

References

securityfocus.com/bid/28854 · Exploit
exchange.xforce.ibmcloud.com/vulnerabilities/41947
exploit-db.com/exploits/5466

More vulnerabilities in openinvoice

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free