CVE-2020-35395

XSS in the Add Expense Component of EGavilan Media Expense Management System 1.0 allows an attacker to permanently store malicious JavaScript code via the 'description' field...

PT-2022-11987

Name of the Vulnerable Software and Affected Versions EGavilan Media Expense-Management-System version 1.0 Description The issue allows a remote attacker to compromise the application's SQL database via SQL Injection. This is possible through the "/expense action.php" API endpoint. Recommendation...

CVE-2021-44098: Improper Neutralization of Special Elements used in an SQL Command

EGavilan Media Expense-Management-System 1.0 is vulnerable to SQL Injection via /expenseaction.php. This allows a remote attacker to compromise Application SQL database...

CVE-2020-35395

XSS in the Add Expense Component of EGavilan Media Expense Management System 1.0 allows an attacker to permanently store malicious JavaScript code via the 'description' field...

CVE-2020-35395: Improper Neutralization of Input During Web Page Generation

XSS in the Add Expense Component of EGavilan Media Expense Management System 1.0 allows an attacker to permanently store malicious JavaScript code via the 'description' field...

PT-2020-17323

Name of the Vulnerable Software and Affected Versions EGavilan Media Expense Management System version 1.0 Description The issue allows an attacker to permanently store malicious JavaScript code via the description field in the Add Expense Component. This enables the attacker to execute the...