CVE-2025-40731

CVE-2025-40731 is a SQL injection vulnerability in Daily Expense Manager v1.0 affecting the /update.php endpoint, exploitable via the pname, pprice and id parameters. The vulnerability allows an attacker to retrieve, create, update and delete databases as described in the cited sources. Affected ...

PT-2025-27426 · Unknown · Daily Expense Manager

Name of the Vulnerable Software and Affected Versions: Daily Expense Manager version 1.0 Description: The issue is a Reflected Cross-Site Scripting XSS vulnerability that allows an attacker to execute JavaScript code. This is achieved by sending a POST request through the password and confirm...

Code-Projects Daily Expense Manager 安全漏洞

Daily Expense Manager is a daily expense management system. Daily Expense Manager suffers from a user enumeration vulnerability that stems from the unvalidated parameter name in the file /check.php, no details of the vulnerability are available at this time...

PT-2025-27425 · Unknown · Daily Expense Manager

Name of the Vulnerable Software and Affected Versions: Daily Expense Manager version 1.0 Description: A Reflected Cross-Site Scripting XSS issue exists, allowing an attacker to execute JavaScript code. This is achieved by sending a POST request through the username parameter in the "/login.php" A...

PT-2025-27423 · Unknown · Daily Expense Manager

Name of the Vulnerable Software and Affected Versions: Daily Expense Manager version 1.0 Description: The issue allows an attacker to retrieve, create, update, and delete databases through the pname, pprice, and id parameters in the "/update.php" API endpoint. Recommendations: For Daily Expense...

PT-2025-27424 · Unknown · Daily Expense Manager

Name of the Vulnerable Software and Affected Versions: Daily Expense Manager version 1.0 Description: The issue is related to a user enumeration vulnerability. To exploit this, a POST request must be sent using the name parameter in the "/check.php" endpoint. Recommendations: For Daily Expense...

Code-Projects Daily Expense Manager 跨站脚本漏洞

Daily Expense Manager is a daily expense management system. Daily Expense Manager suffers from a cross-site scripting vulnerability that stems from the lack of effective filtering and escaping of user-supplied data in the parameter username in the file /login.php, which can be exploited by an...

Daily Expense Manager 1.0 - Cross-Site Request Forgery (Delete Income) Vulnerability

Exploit for php platform in category web applications Exploit Title: Daily Expense Manager - CSRF Delete Income Exploit Author: Mr Winst0n Author E-mail: email protected Vendor Homepage: https://sourceforge.net/projects/daily-expense-manager/ Tested Version: 1.0 Tested on: Parrot OS PoC: 0day.tod...

Daily Expense Manager 1.0 - Cross-Site Request Forgery (Delete Income)

Daily Expense Manager 1.0 - Cross-Site Request Forgery Delete Income Exploit Title: Daily Expense Manager - CSRF Delete Income Exploit Author: Mr Winst0n Author E-mail: [email protected] Discovery Date: August 8, 2019 Vendor Homepage: https://sourceforge.net/projects/daily-expense-manager...

Daily Expense Manager 1.0 - Cross-Site Request Forgery (Delete Income)

Exploit Title: Daily Expense Manager - CSRF Delete Income Exploit Author: Mr Winst0n Author E-mail: [email protected] Discovery Date: August 8, 2019 Vendor Homepage: https://sourceforge.net/projects/daily-expense-manager/ Tested Version: 1.0 Tested on: Parrot OS PoC:...

Daily Expense Manager 1.0 Cross Site Request Forgery

Exploit Title: Daily Expense Manager - CSRF Delete Income Exploit Author: Mr Winst0n Author E-mail: [email protected] Discovery Date: August 8, 2019 Vendor Homepage: https://sourceforge.net/projects/daily-expense-manager/ Tested Version: 1.0 Tested on: Parrot OS PoC:...

Expense Manager - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Expense Manager published at the 'play' market has multiple vulnerabilities...

MyMoney. Expense Manager - Dynamic Code Loading, External URLs, Runtime command execution vulnerabilities

HackApp vulnerability scanner discovered that application MyMoney. Expense Manager published at the 'play' market has multiple vulnerabilities...

My Wallet - Expense Manager - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application My Wallet - Expense Manager published at the 'play' market has multiple vulnerabilities...

Expense Manager - Dynamic Code Loading, Exported ContentProvider, Exported components vulnerabilities

HackApp vulnerability scanner discovered that application Expense Manager published at the 'play' market has multiple vulnerabilities...

Financisto - Expense Manager - Customized SSL, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application Financisto - Expense Manager published at the 'play' market has multiple vulnerabilities...

Expense Manager - Customized SSL, External URLs, KeyStore usage vulnerabilities

HackApp vulnerability scanner discovered that application Expense Manager published at the 'play' market has multiple vulnerabilities...

Financius - Expense Manager - Customized SSL, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application Financius - Expense Manager published at the 'play' market has multiple vulnerabilities...

Expense Manager - SD-card access, Suspicious files, Unsafe deleting vulnerabilities

HackApp vulnerability scanner discovered that application Expense Manager published at the 'play' market has multiple vulnerabilities...

Expense Manager - External URLs, SD-card access, Suspicious files vulnerabilities

HackApp vulnerability scanner discovered that application Expense Manager published at the 'play' market has multiple vulnerabilities...