VULNERABILITY INTELLIGENCE

CVE-2012-4673

CVSS score7.5 HIGH

EPSS probability1.32%

CISA KEVNot currently listed

Published2012-08-26

Last modified2026-06-16

Description

SQL injection vulnerability in application/controllers/invoice.php in NeoInvoice might allow remote attackers to execute arbitrary SQL commands via vectors involving the sort_col variable in the list_items function, a different vulnerability than CVE-2012-3477.