Sql injection

2022-06-0214:15:00

PRIOn knowledge base

www.prio-n.com

9.6 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

48.8%

JSON

EGavilan Media Expense-Management-System 1.0 is vulnerable to SQL Injection via /expense_action.php. This allows a remote attacker to compromise Application SQL database.

CPENameOperatorVersion
expense_management_systemeq1.0

CPE	Name	Operator	Version
	expense_management_system	eq	1.0

References

github.com/EGavilan-Media/Expense-Management-System/issues/1

medium.com/@shubhamvpandey/cve-2021-44098-8dbaced8b854