EGavilan Media Expense-Management-System SQL Injection Vulnerability

EGavilan Media Expense-Management-System is a simple expense management system from EGavilan Media, Inc. An SQL injection vulnerability exists in EGavilan Media Expense-Management-System version 1.0, which stems from vulnerability to SQL injection via / expense_action.php for SQL injection attacks. A remote attacker could exploit this vulnerability to compromise the application SQL database.