# Affected software: simple invoice # Type of vulnerability:adding admin user via csrf # URL:simpleinvoices.org # Discovered by: provensec # Website: provensec.com #version:2011.1 # Proof of concept