14 matches found
CVE-2024-7811
A vulnerability classified as critical has been found in SourceCodester Daily Expenses Monitoring App 1.0. This affects an unknown part of the file /endpoint/delete-expense.php. The manipulation of the argument expense leads to sql injection. It is possible to initiate the attack remotely. The...
CVE-2024-7811
A vulnerability classified as critical has been found in SourceCodester Daily Expenses Monitoring App 1.0. This affects an unknown part of the file /endpoint/delete-expense.php. The manipulation of the argument expense leads to sql injection. It is possible to initiate the attack remotely. The...
CVE-2024-7811
SourceCodester Daily Expenses Monitoring App 1.0 contains a SQL injection in the /endpoint/delete-expense.php endpoint caused by unsafely handling the expense parameter. The vulnerability can be exploited remotely (network vector) and affects the endpoint regardless of user interaction. Exploitat...
CVE-2024-7811 SourceCodester Daily Expenses Monitoring App delete-expense.php sql injection
A vulnerability classified as critical has been found in SourceCodester Daily Expenses Monitoring App 1.0. This affects an unknown part of the file /endpoint/delete-expense.php. The manipulation of the argument expense leads to sql injection. It is possible to initiate the attack remotely. The...
CVE-2024-7811: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability classified as critical has been found in SourceCodester Daily Expenses Monitoring App 1.0. This affects an unknown part of the file /endpoint/delete-expense.php. The manipulation of the argument expense leads to sql injection. It is possible to initiate the attack remotely. The...
SourceCodester Daily Expenses Monitoring SQL注入漏洞
SourceCodester Daily Expenses Monitoring is a daily income and expense monitoring platform from SourceCodester, Inc. A SQL injection vulnerability exists in SourceCodester Daily Expenses Monitoring version 1.0, which originates when the expense parameter on the /endpoint/delete-expense.php page...
PT-2024-38598 · Unknown · Sourcecodester Daily Expenses Monitoring App
Name of the Vulnerable Software and Affected Versions: SourceCodester Daily Expenses Monitoring App version 1.0 Description: A critical issue has been found in the SourceCodester Daily Expenses Monitoring App, affecting an unknown part of the file /endpoint/delete-expense.php. The manipulation of...
PHPGurukul Daily Expenses Management System Security Vulnerability
PHPGurukul Daily Expenses Management System is a daily expenses management system from PHPGurukul, Inc. A security vulnerability exists in PHPGurukul Daily Expenses Management System version 1.0, which is caused by a time-based SQL injection vulnerability in the add-expense.php page, which can be...
CVE-2024-29390: Improper Neutralization of Special Elements used in an SQL Command
Daily Expenses Management System version 1.0, developed by PHP Gurukul, contains a time-based blind SQL injection vulnerability in the 'add-expense.php' page. An attacker can exploit the 'item' parameter in a POST request to execute arbitrary SQL commands in the backend database. This can be done...
Exploit for SQL Injection in Anujk305 Daily_Expenses_Management_System
CVEHunting Welcome to the CVEHunting repository. This repos...
PT-2024-4332 · Unknown · Daily Expenses Management System
Name of the Vulnerable Software and Affected Versions: Daily Expenses Management System version 1.0 Description: The Daily Expenses Management System contains a time-based blind SQL injection vulnerability in the 'add-expense.php' page. An attacker can exploit the item parameter in a POST request...
Daily Expenses Management System 1.0 Cross Site Scripting
Exploit Title: Daily Expenses Management System 1.0 - Multiple Persistent Cross-Site Scripting Date: 2020-8-4 Exploit Author: Edo Maland Vendor Homepage: https://www.sourcecodester.com/php/14372/daily-tracker-system-phpmysql.html Software Link:...
Daily Expenses Management System 1.0 SQL Injection
Exploit Title: Daily Expenses Management System 1.0 - 'username' SQL Injection Exploit Author: Daniel Ortiz Date: 2020-08-01 Vendor Homepage: https://www.sourcecodester.com/php/14372/daily-tracker-system-phpmysql.html Tested on: XAMPP Version 5.6.40 / Windows 10 Software Link:...
Daily Expenses 3 - Customized SSL, Dangerous filesystem permissions, Redefined SSL Common Names verifier vulnerabilities
HackApp vulnerability scanner discovered that application Daily Expenses 3 published at the 'play' market has multiple vulnerabilities...