CVE-2007-1341: Simple Invoices

Medium severity, CVSS 5.0. EPSS: 1.3% chance of exploitation in the next 30 days.

include/auth/auth.php in Simple Invoices before 2007 03 05 does not use the login system to protect print preview pages for invoices, which might allow attackers to obtain sensitive information.

Affected products

• Simple Invoices Simple Invoices: version 2006-12-11 only; version 2007-01-25 only; version 2007-02-02 only

Published 2007-03-08. Last modified 2026-06-16.