PT-2022-11987

Name of the Vulnerable Software and Affected Versions EGavilan Media Expense-Management-System version 1.0 Description The issue allows a remote attacker to compromise the application's SQL database via SQL Injection. This is possible through the "/expense action.php" API endpoint. Recommendation...