Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Vendor: Invoice Project Clear all filters
TI-2015-03680 CVE-2015-4382 · GHSA-qc5w-pjxj-hxgf

Multiple cross-site request forgery (CSRF) vulnerabilities in the Invoice module 6.x-1.x…

Priority LOW 31

Multiple cross-site request forgery (CSRF) vulnerabilities in the Invoice module 6.x-1.x before 6.x-1.2 and 7.x-1.x before 7.x-1.3 for Drupal allow remote attackers to hijack the authentication of arbitrary users for req…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.00644 Published 2015-06-15 No fix listed CWE-352
TI-2015-03679 CVE-2015-4381 · GHSA-9qp6-gqfr-4j3m

Cross-site scripting (XSS) vulnerability in the Invoice module 6.x-1.x before 6.x-1.2 and…

Priority LOW 19

Cross-site scripting (XSS) vulnerability in the Invoice module 6.x-1.x before 6.x-1.2 and 7.x-1.x before 7.x-1.3 for Drupal allows remote authenticated users with the "Administer own invoices" permission to inject arbitr…

CVSS 2.0LOW 3.5 Network Low privileges Interaction — EPSS 0.00947 Published 2015-06-15 No fix listed CWE-79