CVE-2021-41645

Remote Code Execution RCE vulnerability exists in Sourcecodester Budget and Expense Tracker System 1.0 that allows a remote malicious user to inject arbitrary code via the image upload field...

PT-2021-23364 · Unknown · Sourcecodester Budget/Expense Tracker System

Name of the Vulnerable Software and Affected Versions: Sourcecodester Budget and Expense Tracker System version 1.0 Description: A Remote Code Execution RCE issue exists, allowing a remote malicious user to inject arbitrary code via the image upload field. Recommendations: For Sourcecodester Budg...

Budgets And Expense Tracker System 1.0 Shell Upload

Exploit Title: Budget and Expense Tracker System 1.0 - Remote Code Execution RCE Unauthenticated Exploit Author: Abdullah Khawaja hax.3xploit Date: 2021-09-21 Vendor Homepage: https://www.sourcecodester.com/php/14893/budget-and-expense-tracker-system-php-free-source-code.html Software Link:...

Budget and Expense Tracker System 1.0 - Authenticated Bypass Vulnerability

Exploit Title: Budget and Expense Tracker System 1.0 - Authenticated Bypass Exploit Author: Prunier Charles-Yves Vendor Homepage: https://www.sourcecodester.com/php/14893/budget-and-expense-tracker-system-php-free-source-code.html Software Link:...

Daily Expense Tracker System Cross-Site Scripting Vulnerability (CNVD-2025-31006)

Daily Expense Tracker System is a PHP and MySQL based daily expense tracking system. Daily Expense Tracker System suffers from a cross-site scripting vulnerability that originates from the user-profile.php Full Name parameter. No details of the vulnerability are available at this time...

Daily Expense Tracker System Cross-Site Scripting Vulnerability (CNVD-2025-31005)

Daily Expense Tracker System is a PHP and MySQL based daily expense tracking system. Daily Expense Tracker System suffers from a cross-site scripting vulnerability that originates from the add-expense.php Item parameter. No details of the vulnerability are available at this time...

CVE-2021-26304

PHPGurukul Daily Expense Tracker System 1.0 is vulnerable to stored XSS via the add-expense.php Item parameter...

CVE-2021-26303

PHPGurukul Daily Expense Tracker System 1.0 is vulnerable to stored XSS via the user-profile.php Full Name field...

CVE-2021-26303

PHPGurukul Daily Expense Tracker System 1.0 is vulnerable to stored XSS via the user-profile.php Full Name field...

CVE-2021-26304

PHPGurukul Daily Expense Tracker System 1.0 is vulnerable to stored XSS via the add-expense.php Item parameter...

Design/Logic Flaw

PHPGurukul Daily Expense Tracker System 1.0 is vulnerable to stored XSS via the add-expense.php Item parameter...

Design/Logic Flaw

PHPGurukul Daily Expense Tracker System 1.0 is vulnerable to stored XSS via the user-profile.php Full Name field...

CVE-2021-26303

PHPGurukul Daily Expense Tracker System 1.0 is vulnerable to stored XSS via the user-profile.php Full Name field...

CVE-2021-26303

The vulnerability CVE-2021-26303 affects PHPGurukul Daily Expense Tracker System 1.0, where a stored XSS is possible via the user-profile.php Full Name field . The root cause is unsanitized input being stored and later rendered, enabling an attacker to inject script into the profile display. The ...

CVE-2021-26304

PHPGurukul Daily Expense Tracker System 1.0 is vulnerable to a stored XSS flaw via the add-expense.php Item parameter (CVE-2021-26304). The vulnerability is confirmed across multiple sources in the connected documents; exploitation details beyond “stored XSS via the add-expense.php Item parameter...

CVE-2021-26304

PHPGurukul Daily Expense Tracker System 1.0 is vulnerable to stored XSS via the add-expense.php Item parameter...

PHPGurukul Daily Expense Tracker System 跨站脚本漏洞

Daily Expense Tracker System is a PHP and MySQL based daily expense tracking system. Daily Expense Tracker System suffers from a cross-site scripting vulnerability that originates from the add-expense.php Item parameter. No details of the vulnerability are available at this time...

PHPGurukul Daily Expense Tracker System 跨站脚本漏洞

Daily Expense Tracker System is a PHP and MySQL based daily expense tracking system. Daily Expense Tracker System suffers from a cross-site scripting vulnerability that originates from the user-profile.php Full Name parameter. No details of the vulnerability are available at this time...

Daily Expense Tracker System 1.0 Cross Site Scripting

Exploit Title: Daily Expense Tracker System Stored Cross-Site Scripting Vulnerability Date: 2021-01-26 Exploit Author: Priyanka Samak Vendor Homepage: https://phpgurukul.com/ Software Link: https://phpgurukul.com/daily-expense-tracker-using-php-and-mysql/ Software: : Daily Expense Tracker System...

Expense Tracker 1.0 Cross Site Scripting

Exploit Title: Expense Tracker 1.0 - 'Expense Name' Stored Cross-Site Scripting Exploit Author: Shivam Vermacyb3rn3rd Date: 2021-01-05 Vendor Homepage: https://code-projects.org/expense-tracker-in-php-with-source-code/ Software Link: https://code-projects.org Version: 1.0 Category: Web Applicatio...