CVE-2007-3430 EXPLOIT
7.5
HIGH · CVSS 2.0 · EPSS 1.2% (pctl 67)
Patch early
A public exploit exists.
Description
SQL injection vulnerability in index.php in Simple Invoices 2007 05 25 allows remote attackers to execute arbitrary SQL commands via the submit parameter in an email action.
Scoring
| CVSS | 7.5 (HIGH, v2.0) |
|---|---|
| Vector | AV:N/AC:L/Au:N/C:P/I:P/A:P |
| EPSS | 1.2% — more likely to be exploited than 67% of all CVEs |
| On CISA KEV | no |
| Public exploit | yes |
| Published | 2007-06-27 |
| Last modified | 2026-06-16 |
Affected (1)
| Vendor | Product |
|---|---|
| simple invoices | simple invoices |
Public exploits
| Source | Title | Date |
|---|---|---|
| exploit-db | Simple Invoices 2007 05 25 - 'index.php?submit' SQL Injection | 2007-06-24 |
References
- http://osvdb.org/36293
- http://secunia.com/advisories/25789
- http://www.securityfocus.com/bid/24601
- http://www.vupen.com/english/advisories/2007/2310
- https://exchange.xforce.ibmcloud.com/vulnerabilities/35021
- https://www.exploit-db.com/exploits/4098
- http://osvdb.org/36293
- http://secunia.com/advisories/25789
- http://www.securityfocus.com/bid/24601
- http://www.vupen.com/english/advisories/2007/2310
- https://exchange.xforce.ibmcloud.com/vulnerabilities/35021
- https://www.exploit-db.com/exploits/4098
→ the Explorer · watch your stack · NVD