CVE-2025-40733 Reflected Cross-Site Scripting (XSS) vulnerability in Daily Expense Manager

Reflected Cross-Site Scripting XSS vulnerability in Daily Expense Manager v1.0. This vulnerability allows an attacker to execute JavaScript code by sending a POST request through the username parameter in /login.php...

CVE-2025-40732 User enumeration vulnerability in Daily Expense Manager

user enumeration vulnerability in Daily Expense Manager v1.0. To exploit this vulnerability a POST request must be sent using the name parameter in /check.php...

CVE-2025-40732

CVE-2025-40732 affects Daily Expense Manager v1.0. The issue is a user-enumeration vulnerability caused by an unvalidated name parameter in /check.php, exploitable via a POST request containing the name parameter. Mitigation suggestions from connected sources include restricting access to /check....

CVE-2025-40732 User enumeration vulnerability in Daily Expense Manager

user enumeration vulnerability in Daily Expense Manager v1.0. To exploit this vulnerability a POST request must be sent using the name parameter in /check.php...

CVE-2025-40731 SQL injection vulnerability in Daily Expense Manager

SQL injection vulnerability in Daily Expense Manager v1.0. This vulnerability allows an attacker to retrieve, create, update and delete databases through the pname, pprice and id parameters in /update.php...

CVE-2025-40731 SQL injection vulnerability in Daily Expense Manager

SQL injection vulnerability in Daily Expense Manager v1.0. This vulnerability allows an attacker to retrieve, create, update and delete databases through the pname, pprice and id parameters in /update.php...

CVE-2025-40731

CVE-2025-40731 is a SQL injection vulnerability in Daily Expense Manager v1.0 affecting the /update.php endpoint, exploitable via the pname, pprice and id parameters. The vulnerability allows an attacker to retrieve, create, update and delete databases as described in the cited sources. Affected ...

PT-2025-27424 · Unknown · Daily Expense Manager

Name of the Vulnerable Software and Affected Versions: Daily Expense Manager version 1.0 Description: The issue is related to a user enumeration vulnerability. To exploit this, a POST request must be sent using the name parameter in the "/check.php" endpoint. Recommendations: For Daily Expense...

PT-2025-27423 · Unknown · Daily Expense Manager

Name of the Vulnerable Software and Affected Versions: Daily Expense Manager version 1.0 Description: The issue allows an attacker to retrieve, create, update, and delete databases through the pname, pprice, and id parameters in the "/update.php" API endpoint. Recommendations: For Daily Expense...

Code-Projects Daily Expense Manager 安全漏洞

Daily Expense Manager is a daily expense management system. Daily Expense Manager suffers from a user enumeration vulnerability that stems from the unvalidated parameter name in the file /check.php, no details of the vulnerability are available at this time...

PT-2025-27426 · Unknown · Daily Expense Manager

Name of the Vulnerable Software and Affected Versions: Daily Expense Manager version 1.0 Description: The issue is a Reflected Cross-Site Scripting XSS vulnerability that allows an attacker to execute JavaScript code. This is achieved by sending a POST request through the password and confirm...

Code-Projects Daily Expense Manager 跨站脚本漏洞

Daily Expense Manager is a daily expense management system. Daily Expense Manager suffers from a cross-site scripting vulnerability that stems from the lack of effective filtering and escaping of user-supplied data in the parameter username in the file /login.php, which can be exploited by an...

PT-2025-27425 · Unknown · Daily Expense Manager

Name of the Vulnerable Software and Affected Versions: Daily Expense Manager version 1.0 Description: A Reflected Cross-Site Scripting XSS issue exists, allowing an attacker to execute JavaScript code. This is achieved by sending a POST request through the username parameter in the "/login.php" A...

CVE-2025-6478

A vulnerability was found in CodeAstro Expense Management System 1.0. It has been rated as problematic. Affected by this issue is some unknown functionality. The manipulation leads to cross-site request forgery. The attack may be launched remotely...

CVE-2025-6478

A vulnerability was found in CodeAstro Expense Management System 1.0. It has been rated as problematic. Affected by this issue is some unknown functionality. The manipulation leads to cross-site request forgery. The attack may be launched remotely...

CVE-2025-6478

A vulnerability was found in CodeAstro Expense Management System 1.0. It has been rated as problematic. Affected by this issue is some unknown functionality. The manipulation leads to cross-site request forgery. The attack may be launched remotely...

CVE-2025-6478

Summary: CVE-2025-6478 describes CSRF in CodeAstro Expense Management System 1.0. The vulnerability affects an unspecified functionality, can be exploited remotely, and has medium severity across CVSS metrics (3.1: 4.3; 2.0: 5.0; 4.0: 5.3). The exact vulnerable component, code path, or root cause...

CVE-2025-6478 CodeAstro Expense Management System cross-site request forgery

A vulnerability was found in CodeAstro Expense Management System 1.0. It has been rated as problematic. Affected by this issue is some unknown functionality. The manipulation leads to cross-site request forgery. The attack may be launched remotely...

CVE-2025-6478 CodeAstro Expense Management System cross-site request forgery

A vulnerability was found in CodeAstro Expense Management System 1.0. It has been rated as problematic. Affected by this issue is some unknown functionality. The manipulation leads to cross-site request forgery. The attack may be launched remotely...

CodeAstro Expense Management System 安全漏洞

CodeAstro Expense Management System is an expense management system from CodeAstro, Inc. A security vulnerability exists in CodeAstro Expense Management System version 1.0 that stems from vulnerability to cross-site request forgery attacks...