Security Advisory
CVE-2007-3430
CVE vulnerability detail — eXtreme Datacenter Security Operations
Description
SQL injection vulnerability in index.php in Simple Invoices 2007 05 25 allows remote attackers to execute arbitrary SQL commands via the submit parameter in an email action.