← Database

CVE-2005-3845

HIGH CVSS: 7.5 Published: 2005-11-26 Modified: 2026-06-16

Description

SQL injection vulnerability in invoices.php in EZ Invoice Inc 2.0 allows remote attackers to execute arbitrary SQL commands via the i parameter. NOTE: the vendor has stated "EZ Invoice, Inc has a patah available. Please email [email protected] and EZI will email you the patch to fix this small issue."

Affected Platforms

Ezinvoiceinc Ez Invoice Inc

Weakness Type

CWE-89

References