Invoice INV-1001

Invoice INV-1001

Bill to : administrator
Items   : Enterprise License x4
Total   : $4210.0
Card    : 4111-****-****-1111

Export a saved report

Downloading an invoice never checks who owns it. The report export joins your file to a directory with no sanitisation - ?file=../../etc/passwd.