PT-2023-29304 · Unknown · Expense Management System

Name of the Vulnerable Software and Affected Versions: Expense Management System version 1.0 Description: An issue in the Expense Management System allows a local attacker to execute arbitrary code via a crafted file uploaded to the "sign-up.php" component. Recommendations: For Expense Management...

CVE-2023-5286

A vulnerability, which was classified as problematic, has been found in SourceCodester Expense Tracker App v1. Affected by this issue is some unknown functionality of the file addcategory.php of the component Category Handler. The manipulation of the argument categoryname leads to cross site...

CVE-2023-5286

A vulnerability, which was classified as problematic, has been found in SourceCodester Expense Tracker App v1. Affected by this issue is some unknown functionality of the file addcategory.php of the component Category Handler. The manipulation of the argument categoryname leads to cross site...

Cross site scripting

A vulnerability, which was classified as problematic, has been found in SourceCodester Expense Tracker App v1. Affected by this issue is some unknown functionality of the file addcategory.php of the component Category Handler. The manipulation of the argument categoryname leads to cross site...

CVE-2023-5286 SourceCodester Expense Tracker App Category add_category.php cross site scripting

A vulnerability, which was classified as problematic, has been found in SourceCodester Expense Tracker App v1. Affected by this issue is some unknown functionality of the file addcategory.php of the component Category Handler. The manipulation of the argument categoryname leads to cross site...

CVE-2023-5286

The CVE-2023-5286 entry affects SourceCodester Expense Tracker App v1, specifically the Category Handler’s add_category.php where manipulating the category_name parameter causes cross-site scripting (XSS). Descriptions across multiple sources confirm remote exploitation potential and public discl...

CVE-2023-5286 SourceCodester Expense Tracker App Category add_category.php cross site scripting

A vulnerability, which was classified as problematic, has been found in SourceCodester Expense Tracker App v1. Affected by this issue is some unknown functionality of the file addcategory.php of the component Category Handler. The manipulation of the argument categoryname leads to cross site...

PT-2023-32007 · Sourcecodester · Sourcecodester Expense Tracker App

Name of the Vulnerable Software and Affected Versions: SourceCodester Expense Tracker App version 1 Description: A problematic issue has been found in the file add category.php of the component Category Handler. The manipulation of the category name argument leads to cross site scripting. The...

Expense Tracker Cross-Site Scripting Vulnerability

Expense Tracker is an expense tracker organized by SourceCode and Projects. A cross-site scripting vulnerability exists in Expense Tracker v1. The vulnerability stems from the fact that incorrect manipulation of the parameter categoryname can lead to cross-site scripting...

CVE-2023-44048

Sourcecodester Expense Tracker App v1 is vulnerable to Cross Site Scripting XSS via add category...

CVE-2023-44048

Sourcecodester Expense Tracker App v1 is vulnerable to Cross Site Scripting XSS via add category...

CVE-2023-44048

Sourcecodester Expense Tracker App v1 is vulnerable to Cross Site Scripting XSS via add category...

Cross site scripting

Sourcecodester Expense Tracker App v1 is vulnerable to Cross Site Scripting XSS via add category...

Expense Tracker Cross-Site Scripting Vulnerability

Expense Tracker is an expense tracker organized by SourceCode and Projects. A security vulnerability exists in the Sourcecodester Expense Tracker App v1 version that stems from vulnerability to SQL injection attacks...

CVE-2023-44048

Sourcecodester Expense Tracker App v1 is vulnerable to Cross Site Scripting XSS via add category...

CVE-2023-44048

Sourcecodester Expense Tracker App v1 is vulnerable to Cross Site Scripting XSS via add category...

CVE-2023-44048

Sourcecodester Expense Tracker App v1 is reported vulnerable to Cross Site Scripting (XSS) via the add category action (CVE-2023-44048). The CVSS base score is 5.4 (Medium) with network attack vector, low privileges required, user interaction required, and scope changed; impact is limited to conf...

CVE-2023-42335

Unrestricted File Upload vulnerability in Fl3xx Dispatch 2.10.37 and fl3xx Crew 2.10.37 allows a remote attacker to execute arbitrary code via the add attachment function in the New Expense component...

CVE-2023-42335

Unrestricted File Upload vulnerability in Fl3xx Dispatch 2.10.37 and fl3xx Crew 2.10.37 allows a remote attacker to execute arbitrary code via the add attachment function in the New Expense component...

CVE-2023-42335

Unrestricted File Upload vulnerability in Fl3xx Dispatch 2.10.37 and fl3xx Crew 2.10.37 allows a remote attacker to execute arbitrary code via the add attachment function in the New Expense component...