Cale Dunlap Openinvoice
2 CVEs affecting Cale Dunlap Openinvoice. Latest disclosed: 2009-03-25. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2008-6524 | | 2009-03-25 | resetpass.php in openInvoice 0.90 beta and earlier allows remote authenticated users to change the passwords of arbitrary users via a modified uid parameter… | |
CVE-2008-6523 | | 2009-03-25 | auth.php in openInvoice 0.90 beta and earlier allows remote attackers to bypass authentication and gain privileges by setting the oiauth cookie. NOTE: this ca… |