CVE-2007-1341

Severity: medium (CVSS 5.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2007-03-08 · updated 2026-06-16

Description

include/auth/auth.php in Simple Invoices before 2007 03 05 does not use the login system to protect print preview pages for invoices, which might allow attackers to obtain sensitive information.

Affected products

Simple Invoices: 2006-12-11, 2007-01-25, 2007-02-02

References

http://code.google.com/p/simpleinvoices/issues/detail?id=35
http://forum.tufat.com/showthread.php?p=116753#post116753
http://osvdb.org/33860
http://secunia.com/advisories/24402
http://www.securityfocus.com/bid/22818
https://sourceforge.net/project/shownotes.php?group_id=164303&release_id=491300
http://code.google.com/p/simpleinvoices/issues/detail?id=35
http://forum.tufat.com/showthread.php?p=116753#post116753
http://osvdb.org/33860
http://secunia.com/advisories/24402
http://www.securityfocus.com/bid/22818
https://sourceforge.net/project/shownotes.php?group_id=164303&release_id=491300

Get alerted when CVE-2007-1341 or the next vulnerability affects your stack