CVE-2007-3430: Simple Invoices

High severity, CVSS 7.5. EPSS: 1.2% chance of exploitation in the next 30 days.

SQL injection vulnerability in index.php in Simple Invoices 2007 05 25 allows remote attackers to execute arbitrary SQL commands via the submit parameter in an email action.

Affected products

• Simple Invoices Simple Invoices: version 2007-05-25 only

Published 2007-06-27. Last modified 2026-06-16.