Description
In NCH Express Invoice 7.25, an authenticated low-privilege user can enter a crafted URL to access higher-privileged functionalities such as the "Add New Item" screen.
Unscored
CVE-2020-11561
EUVD-2020-3912GHSA-5rmh-f225-qfjh
In NCH Express Invoice 7.25, an authenticated low-privilege user can enter a crafted URL to access higher-privileged functionalities such a…
Published Apr 7, 2020 · Updated Aug 4, 2024 · Assigned by mitre