Budget And Expense Tracker System SQL Injection Vulnerability

Budget And Expense Tracker System is a web based application. It is used to manage your personal/small business budget and expenses. Budget and Expense Tracker System v1.0 suffers from a SQL injection vulnerability that originates from a lack of validation of the parameter id of /admin/budget/manage_budget.ph for externally entered SQL statements. An attacker can exploit this vulnerability to execute illegal SQL commands to steal sensitive database data.