6 matches found
EUVD-2026-120528
DollarDollar through 4.4 contains a missing authorization vulnerability in addexpense that allows authenticated users to modify other users' account balances by supplying foreign accountid values. Attackers can submit sequential accountid, destinationaccountid, and groupid values to /addexpense t...
CVE-2026-125365
DollarDollar through 4.4 contains a missing authorization vulnerability in addexpense that allows authenticated users to modify other users' account balances by supplying foreign accountid values. Attackers can submit sequential accountid, destinationaccountid, and groupid values to /addexpense t...
CVE-2026-125365: harung1993 dollardollar: DollarDollar through 4.4 contains a missing authorization vulnerability in add_expense() that allows authenticated…
DollarDollar through 4.4 contains a missing authorization vulnerability in addexpense that allows authenticated users to modify other users' account balances by supplying foreign accountid values. Attackers can submit sequential accountid, destinationaccountid, and groupid values to /addexpense t...
CVE-2026-125365 DollarDollar through 4.4 Missing Authorization in /add_expense Balance Tampering
DollarDollar through 4.4 contains a missing authorization vulnerability in addexpense that allows authenticated users to modify other users' account balances by supplying foreign accountid values. Attackers can submit sequential accountid, destinationaccountid, and groupid values to /addexpense t...
CVE-2026-125365
The DollarDollar software, versions through 4.4 , contains a missing authorization vulnerability within the add_expense() function. This flaw allows authenticated users to modify account balances belonging to other users by providing foreign account_id values. Specifically, an attacker can submit...
PT-2026-141188
DollarDollar through 4.4 contains a missing authorization vulnerability in add expense that allows authenticated users to modify other users' account balances by supplying foreign account id values. Attackers can submit sequential account id, destination account id, and group id values to /add...