CVE-2021-41645

Remote Code Execution RCE vulnerability exists in Sourcecodester Budget and Expense Tracker System 1.0 that allows a remote malicious user to inject arbitrary code via the image upload field...

Design/Logic Flaw

PHPGurukul Daily Expense Tracker System 1.0 is vulnerable to stored XSS via the add-expense.php Item parameter...

CVE-2021-26303

The vulnerability CVE-2021-26303 affects PHPGurukul Daily Expense Tracker System 1.0, where a stored XSS is possible via the user-profile.php Full Name field . The root cause is unsanitized input being stored and later rendered, enabling an attacker to inject script into the profile display. The ...

CVE-2021-26304

PHPGurukul Daily Expense Tracker System 1.0 is vulnerable to a stored XSS flaw via the add-expense.php Item parameter (CVE-2021-26304). The vulnerability is confirmed across multiple sources in the connected documents; exploitation details beyond “stored XSS via the add-expense.php Item parameter...

Daily Expense Tracker System 1.0 Cross Site Scripting

Exploit Title: Daily Expense Tracker System Stored Cross-Site Scripting Vulnerability Date: 2021-01-26 Exploit Author: Priyanka Samak Vendor Homepage: https://phpgurukul.com/ Software Link: https://phpgurukul.com/daily-expense-tracker-using-php-and-mysql/ Software: : Daily Expense Tracker System...

Cross site scripting

PHPGurukul Daily Expense Tracker System 1.0 is vulnerable to stored XSS, as demonstrated by the ExpenseItem or ExpenseCost parameter in manage-expense.php...

Sql injection

PHPGurukul Daily Expense Tracker System 1.0 is vulnerable to SQL injection, as demonstrated by the email parameter in index.php or register.php. The SQL injection allows to dump the MySQL database and to bypass the login prompt...

CVE-2020-10107

CVE-2020-10107: PHPGurukul Daily Expense Tracker System 1.0 is vulnerable to stored XSS, evidenced by the ExpenseItem and ExpenseCost parameters within manage-expense.php. The Red Hat and NVD records corroborate a stored XSS issue affecting this application. No exploitation routes, affected versi...