« Volver al listado

CVE-2007-1341

Estado: ModificadaMedia (5)—

include/auth/auth.php in Simple Invoices before 2007 03 05 does not use the login system to protect print preview pages for invoices, which might allow attackers to obtain sensitive information.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Simple Invoices — Simple Invoices

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2007-1341",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 5,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N",
          "authentication": "NONE",
          "integrityImpact": "NONE",
          "accessComplexity": "LOW",
          "availabilityImpact": "NONE",
          "confidentialityImpact": "PARTIAL"
        },
        "acInsufInfo": false,
        "impactScore": 2.9,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 10,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2007-03-08T22:19:00.000",
  "references": [
    {
      "url": "http://code.google.com/p/simpleinvoices/issues/detail?id=35",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://forum.tufat.com/showthread.php?p=116753#post116753",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://osvdb.org/33860",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://secunia.com/advisories/24402",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.securityfocus.com/bid/22818",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "https://sourceforge.net/project/shownotes.php?group_id=164303&release_id=491300",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://code.google.com/p/simpleinvoices/issues/detail?id=35",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://forum.tufat.com/showthread.php?p=116753#post116753",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://osvdb.org/33860",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://secunia.com/advisories/24402",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/bid/22818",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://sourceforge.net/project/shownotes.php?group_id=164303&release_id=491300",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-Other"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "include/auth/auth.php in Simple Invoices before 2007 03 05 does not use the login system to protect print preview pages for invoices, which might allow attackers to obtain sensitive information."
    },
    {
      "lang": "es",
      "value": "include/auth/auth.php en el Simple Invoices en versiones anteriores a la 2007 03 05 no utiliza el sistema de autenticación para proteger las previsualizaciones de las páginas a imprimir para las facturas, lo que permite a atacantes obtener información sensible."
    }
  ],
  "lastModified": "2026-06-16T22:37:22.893",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:simple_invoices:simple_invoices:2006-12-11:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "7D77E73A-41DA-4806-9BA8-6B348EC68E4E"
            },
            {
              "criteria": "cpe:2.3:a:simple_invoices:simple_invoices:2007-01-25:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "16F9CCDF-6100-45A5-94F9-ED30EB68B63C"
            },
            {
              "criteria": "cpe:2.3:a:simple_invoices:simple_invoices:2007-02-02:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "07A4935F-05F9-4C93-8ED4-40811C9DF55D"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}