CVE-2007-3430

Simple Invoices - SQL Injection

Title source: rule

Description

SQL injection vulnerability in index.php in Simple Invoices 2007 05 25 allows remote attackers to execute arbitrary SQL commands via the submit parameter in an email action.

Exploits (1)

exploitdb WORKING POC VERIFIED

by Kacper · phpwebappsphp

https://www.exploit-db.com/exploits/4098

View Code ZIP pw:eip

References (6)

[Exploit] http://www.securityfocus.com/bid/24601

[Third Party Advisory, VDB Entry] https://exchange.xforce.ibmcloud.com/vulnerabilities/35021

[Exploit, Third Party Advisory] https://www.exploit-db.com/exploits/4098

[Third Party Advisory, VDB Entry] http://osvdb.org/36293

[Third Party Advisory] http://secunia.com/advisories/25789

[Third Party Advisory] http://www.vupen.com/english/advisories/2007/2310

Scores

EPSS 0.0129

EPSS Percentile 79.8%

Details

Status published

Products (1)

simple_invoices/simple_invoices 2007-05-25

Published Jun 27, 2007

Tracked Since Feb 18, 2026