Invoice INV-1003

Bill to : carol
Items   : Mechanical Keyboard x1
Total   : $129.0
Card    : 4242-****-****-4242

Export a saved report

Downloading an invoice never checks who owns it. The report export joins your file to a directory with no sanitisation - ?file=../../etc/passwd.