CVE-2024-41618

Money Manager EX WebApp web-money-manager-ex 1.2.2 is vulnerable to SQL Injection in the transactiondeletegroup function. The vulnerability is due to improper sanitization of user input in the TrDeleteArr parameter, which is directly incorporated into an SQL query...

CVE-2024-41617

Money Manager EX WebApp web-money-manager-ex 1.2.2 is vulnerable to Incorrect Access Control. The redirectifnotloggedin function in functionssecurity.php fails to terminate script execution after redirecting unauthenticated users. This flaw allows an unauthenticated attacker to upload arbitrary...

CVE-2024-41617

Money Manager EX WebApp web-money-manager-ex 1.2.2 is vulnerable to Incorrect Access Control. The redirectifnotloggedin function in functionssecurity.php fails to terminate script execution after redirecting unauthenticated users. This flaw allows an unauthenticated attacker to upload arbitrary...

CVE-2024-41617

Money Manager EX WebApp web-money-manager-ex 1.2.2 is vulnerable to Incorrect Access Control. The redirectifnotloggedin function in functionssecurity.php fails to terminate script execution after redirecting unauthenticated users. This flaw allows an unauthenticated attacker to upload arbitrary...

CVE-2024-41617

Money Manager EX WebApp web-money-manager-ex 1.2.2 is vulnerable to Incorrect Access Control. The redirectifnotloggedin function in functionssecurity.php fails to terminate script execution after redirecting unauthenticated users. This flaw allows an unauthenticated attacker to upload arbitrary...

Money Manager EX WebApp 安全漏洞

Money Manager EX WebApp is an open source personal finance management software from Money Manager EX. A security vulnerability exists in Money Manager EX WebApp version 1.2.2, which stems from an access control error, where the function fails to terminate script execution after redirecting an...

CVE-2024-41617

Money Manager EX WebApp web-money-manager-ex 1.2.2 is vulnerable to Incorrect Access Control. The "redirectifnotloggedin" function in "functionssecurity.php" fails to terminate script execution after redirecting unauthenticated users. This flaw allows an unauthenticated attacker to upload arbitra...

CVE-2024-41618

Money Manager EX WebApp web-money-manager-ex 1.2.2 is vulnerable to SQL Injection in the transactiondeletegroup function. The vulnerability is due to improper sanitization of user input in the TrDeleteArr parameter, which is directly incorporated into an SQL query...

web-money-manager-ex 安全漏洞

web-money-manager-ex is a personal money management system from Money Manager Ex. A security vulnerability exists in web-money-manager-ex version 1.2.2, which stems from improper cleanup of user input in the TrDeleteArr parameter, making it susceptible to SQL injection attacks...

CVE-2024-41618

Money Manager EX WebApp (web-money-manager-ex) version 1.2.2 is vulnerable to SQL Injection within the transaction_delete_group function. The root cause is the improper sanitization of user input provided in the TrDeleteArr parameter, which is directly incorporated into an SQL query. This vulnera...

CVE-2024-41618

Money Manager EX WebApp web-money-manager-ex 1.2.2 is vulnerable to SQL Injection in the transactiondeletegroup function. The vulnerability is due to improper sanitization of user input in the TrDeleteArr parameter, which is directly incorporated into an SQL query...

CVE-2024-41618

Money Manager EX WebApp web-money-manager-ex 1.2.2 is vulnerable to SQL Injection in the "transactiondeletegroup" function. The vulnerability is due to improper sanitization of user input in the "TrDeleteArr" parameter, which is directly incorporated into an SQL query...

CVE-2024-41618

Money Manager EX WebApp web-money-manager-ex 1.2.2 is vulnerable to SQL Injection in the transactiondeletegroup function. The vulnerability is due to improper sanitization of user input in the TrDeleteArr parameter, which is directly incorporated into an SQL query...

CVE-2024-41618: Improper Neutralization of Special Elements used in an SQL Command

Money Manager EX WebApp web-money-manager-ex 1.2.2 is vulnerable to SQL Injection in the transactiondeletegroup function. The vulnerability is due to improper sanitization of user input in the TrDeleteArr parameter, which is directly incorporated into an SQL query...

PT-2024-29466

Name of the Vulnerable Software and Affected Versions Money Manager EX WebApp web-money-manager-ex version 1.2.2 Description The issue is due to improper sanitization of user input in the TrDeleteArr parameter, which is directly incorporated into an SQL query. This occurs in the transaction delet...

CVE-2024-41617

The Money Manager EX WebApp (web-money-manager-ex) version 1.2.2 is vulnerable to Incorrect Access Control within the functions_security.php file. The redirect_if_not_loggedin function fails to terminate script execution after redirecting unauthenticated users, which allows an unauthenticated att...

CVE-2024-41617: Incorrect Authorization

Money Manager EX WebApp web-money-manager-ex 1.2.2 is vulnerable to Incorrect Access Control. The redirectifnotloggedin function in functionssecurity.php fails to terminate script execution after redirecting unauthenticated users. This flaw allows an unauthenticated attacker to upload arbitrary...