CVE-2026-6193

A security flaw has been discovered in PHPGurukul Daily Expense Tracking System 1.1. Affected is an unknown function of the file /register.php. The manipulation of the argument email results in sql injection. The attack may be launched remotely. The exploit has been released to the public and may...

EUVD-2008-4738

Malware in sbrugna...

EUVD-2008-4736

Malware in sbrugna...

EUVD-2008-4737

Malware in sbrugna...

CVE-2008-4757

Multiple SQL injection vulnerabilities in PHP-Daily allow remote attackers to execute arbitrary SQL commands via the 1 id parameter to a addpostit.php b delete.php, and c modprestdate.php; and the 2 prev parameter to d prestdetail.php...

Cross site scripting

Cross-site scripting XSS vulnerability in addprestdate.php in PHP-Daily allows remote attackers to inject arbitrary web script or HTML via the date parameter...

Sql injection

Multiple SQL injection vulnerabilities in PHP-Daily allow remote attackers to execute arbitrary SQL commands via the 1 id parameter to a addpostit.php b delete.php, and c modprestdate.php; and the 2 prev parameter to d prestdetail.php...

Directory traversal

Directory traversal vulnerability in downloadfile.php in PHP-Daily allows remote attackers to read arbitrary local files via a .. dot dot in the fichier parameter...

CVE-2008-4758

Technical details of CVE-2008-4758 are not publicly provided in the connected documents. No explicit affected product/version, root cause, or remediation is available here; monitor for updates.

CVE-2008-4758: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in downloadfile.php in PHP-Daily allows remote attackers to read arbitrary local files via a .. dot dot in the fichier parameter...

CVE-2008-4757: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in PHP-Daily allow remote attackers to execute arbitrary SQL commands via the 1 id parameter to a addpostit.php b delete.php, and c modprestdate.php; and the 2 prev parameter to d prestdetail.php...

CVE-2008-4757

Multiple SQL injection vulnerabilities in PHP-Daily allow remote attackers to execute arbitrary SQL commands via the 1 id parameter to a addpostit.php b delete.php, and c modprestdate.php; and the 2 prev parameter to d prestdetail.php...

CVE-2008-4758

Directory traversal vulnerability in downloadfile.php in PHP-Daily allows remote attackers to read arbitrary local files via a .. dot dot in the fichier parameter...

CVE-2008-4756

Cross-site scripting XSS vulnerability in addprestdate.php in PHP-Daily allows remote attackers to inject arbitrary web script or HTML via the date parameter...

CVE-2008-4757

CVE-2008-4757 involves multiple SQL injection vulnerabilities in PHP-Daily. The affected component is the PHP-Daily web application, where attacker-controlled inputs can alter SQL queries. The vulnerabilities occur via the id parameter in add_postit.php, delete.php, and mod_prest_date.php, and vi...

CVE-2008-4756

CVE-2008-4756 is an XSS vulnerability in PHP-Daily’s add_prest_date.php. The issue arises from the date parameter, allowing remote attackers to inject arbitrary web script or HTML. Based on connected documents, affected software is PHP-Daily; vulnerable component is add_prest_date.php; root cause...

CVE-2008-4756: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in addprestdate.php in PHP-Daily allows remote attackers to inject arbitrary web script or HTML via the date parameter...