CVE-2021-26304

PHPGurukul Daily Expense Tracker System 1.0 is vulnerable to stored XSS via the add-expense.php Item parameter...

CVE-2025-25351: Improper Neutralization of Special Elements used in an SQL Command

PHPGurukul Daily Expense Tracker System v1.1 is vulnerable to SQL Injection in /dets/add-expense.php via the dateexpense parameter...

CVE-2025-25349: Improper Neutralization of Special Elements used in an SQL Command

PHPGurukul Daily Expense Tracker System v1.1 is vulnerable to SQL Injection in /dets/add-expense.php via the costitem parameter...

CVE-2024-29390: Improper Neutralization of Special Elements used in an SQL Command

Daily Expenses Management System version 1.0, developed by PHP Gurukul, contains a time-based blind SQL injection vulnerability in the 'add-expense.php' page. An attacker can exploit the 'item' parameter in a POST request to execute arbitrary SQL commands in the backend database. This can be done...

CVE-2024-29390

Daily Expenses Management System version 1.0, developed by PHP Gurukul, contains a time-based blind SQL injection vulnerability in the 'add-expense.php' page. An attacker can exploit the 'item' parameter in a POST request to execute arbitrary SQL commands in the backend database. This can be done...

PT-2024-4332 · Unknown · Daily Expenses Management System

Name of the Vulnerable Software and Affected Versions: Daily Expenses Management System version 1.0 Description: The Daily Expenses Management System contains a time-based blind SQL injection vulnerability in the 'add-expense.php' page. An attacker can exploit the item parameter in a POST request...

CVE-2021-26304

PHPGurukul Daily Expense Tracker System 1.0 is vulnerable to stored XSS via the add-expense.php Item parameter...

Design/Logic Flaw

PHPGurukul Daily Expense Tracker System 1.0 is vulnerable to stored XSS via the add-expense.php Item parameter...

CVE-2021-26304

PHPGurukul Daily Expense Tracker System 1.0 is vulnerable to a stored XSS flaw via the add-expense.php Item parameter (CVE-2021-26304). The vulnerability is confirmed across multiple sources in the connected documents; exploitation details beyond “stored XSS via the add-expense.php Item parameter...

PT-2021-16991

Name of the Vulnerable Software and Affected Versions PHPGurukul Daily Expense Tracker System version 1.0 Description The issue concerns a stored XSS vulnerability via the "Item" parameter in the "add-expense.php" endpoint. This allows for potential malicious script execution. No information is...

CVE-2021-26304: Improper Neutralization of Input During Web Page Generation

PHPGurukul Daily Expense Tracker System 1.0 is vulnerable to stored XSS via the add-expense.php Item parameter...