Vulnerabilities (CVE)

Filtered by vendor Thomas Hunter Subscribe
Total 2 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2012-4673 1 Thomas Hunter 1 Neoinvoice 2024-11-21 7.5 HIGH N/A
SQL injection vulnerability in application/controllers/invoice.php in NeoInvoice might allow remote attackers to execute arbitrary SQL commands via vectors involving the sort_col variable in the list_items function, a different vulnerability than CVE-2012-3477.
CVE-2012-3477 1 Thomas Hunter 1 Neoinvoice 2024-11-21 7.5 HIGH N/A
SQL injection vulnerability in signup_check.php in NeoInvoice allows remote attackers to execute arbitrary SQL commands via the value parameter in a username action.