Simple Invoices "module" and "view" Parameters Local File Inclusion Vulnerabilities
Description
Two vulnerabilities have been identified in Simple Invoices, which could be exploited by remote attackers to gain knowledge of sensitive information. These issues are due to input validation errors in the "controller.php" script when processing the "module" and "view" parameters, which could be exploited by remote attackers to include or disclose the contents of local files with the privileges of the web server.
Vulnerable Products
Vulnerable Software: Simple Invoices versions prior to 20070202
