Daily Expense Tracker System SQL Injection Vulnerability (CNVD-2025-31003)

Daily Expense Tracker System is a PHP and MySQL based daily expense tracking system. Daily Expense Tracker System suffers from a SQL injection vulnerability that stems from the lack of validation of externally entered SQL statements for the costitem parameter in /dets/add-expense.php. No details ...