GCVE - cpe:2.3:a:thomas_hunter:neoinvoice:-:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:thomas_hunter:neoinvoice:-:*:*:*:*:*:*:*

part: a version: - update: *

Vendor	Thomas Hunter (`2aeb7057-a6bd-5ea5-b00e-5cf0aec28802`)
Product	Neoinvoice (`e236d785-8d8b-5514-835e-ba84961cddd2`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*

Notes

Imported from purl2cpe mapping

PURL	Source	Last updated
`pkg:github/tlhunter/neoinvoice`	purl2cpe	2026-06-01 10:12:20.836254

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2012-4673`	vulnerable	2026-06-08 05:02:52.105112	Details available SQL injection vulnerability in application/controllers/invoice.php in NeoInvoice might allow remote attackers to execute arbitrary SQL commands via vectors involving the sort_col variable in the list_items function, a different vulnerability than CVE-2012-3477. Published: 2012-08-26T01:00:00.000Z Updated: 2024-09-16T22:41:34.878Z Open on db.gcve.eu Reference links https://github.com/mweimerskirch/neoinvoice/commit/501a9d5d261c718913cfc13d212b09b56f3bf087 http://adamcaudill.com/2012/08/12/neoinvoice-blind-sql-injection-cve-2012-3477/ https://github.com/tlhunter/neoinvoice/issues/2	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2012-3477`	vulnerable	2026-06-08 05:02:10.102374	Details available SQL injection vulnerability in signup_check.php in NeoInvoice allows remote attackers to execute arbitrary SQL commands via the value parameter in a username action. Published: 2012-08-26T01:00:00.000Z Updated: 2024-09-16T19:19:30.503Z Open on db.gcve.eu Reference links http://archives.neohapsis.com/archives/bugtraq/2012-08/0087.html http://adamcaudill.com/2012/08/12/neoinvoice-blind-sql-injection-cve-2012-3477/	Imported from gcve-enriched-dumps CVE data

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open this panel to browse, search, copy or download the JSON record.