17 matches found
CVE-2023-2772
A vulnerability, which was classified as critical, was found in SourceCodester Budget and Expense Tracker System 1.0. Affected is an unknown function of the file /admin/budget/managebudget.php of the component GET Parameter Handler. The manipulation of the argument id leads to sql injection. It i...
Budget Management security breach
SourceCodester Budget Management System is an application from SourceCodester, Inc. It provides a function to calculate exact expenses through a web application. A security vulnerability exists in Budget Management version 1.0 that stems from the vulnerability to SQL injection attacks via the...
CVE-2023-2772
A vulnerability, which was classified as critical, was found in SourceCodester Budget and Expense Tracker System 1.0. Affected is an unknown function of the file /admin/budget/managebudget.php of the component GET Parameter Handler. The manipulation of the argument id leads to sql injection. It i...
CVE-2023-2772 SourceCodester Budget and Expense Tracker System GET Parameter manage_budget.php sql injection
A vulnerability, which was classified as critical, was found in SourceCodester Budget and Expense Tracker System 1.0. Affected is an unknown function of the file /admin/budget/managebudget.php of the component GET Parameter Handler. The manipulation of the argument id leads to sql injection. It i...
PT-2023-21308 · Unknown · Sourcecodester Budget/Expense Tracker System
Name of the Vulnerable Software and Affected Versions: SourceCodester Budget and Expense Tracker System version 1.0 Description: A critical issue was found in the system, affecting an unknown function of the file /admin/budget/manage budget.php of the component GET Parameter Handler. The...
CVE-2023-2772: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability, which was classified as critical, was found in SourceCodester Budget and Expense Tracker System 1.0. Affected is an unknown function of the file /admin/budget/managebudget.php of the component GET Parameter Handler. The manipulation of the argument id leads to sql injection. It i...
SourceCodester Budget and Expense Tracker System SQL注入漏洞
SourceCodester Budget And Expense Tracker System is a web-based application from Carlo Montero's personal developer. SourceCodester Budget and Expense Tracker System is vulnerable in v1.0 due to a lack of SQL data escaping and filtering in the software. An attacker could use the user name field t...
CVE-2021-40247: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in Sourcecodester Budget and Expense Tracker System v1 by oretnom23, allows attackers to execute arbitrary SQL commands via the username field...
CVE-2021-41645
Remote Code Execution RCE vulnerability exists in Sourcecodester Budget and Expense Tracker System 1.0 that allows a remote malicious user to inject arbitrary code via the image upload field...
CVE-2021-41645
Remote Code Execution RCE vulnerability exists in Sourcecodester Budget and Expense Tracker System 1.0 that allows a remote malicious user to inject arbitrary code via the image upload field...
PT-2021-23364 · Unknown · Sourcecodester Budget/Expense Tracker System
Name of the Vulnerable Software and Affected Versions: Sourcecodester Budget and Expense Tracker System version 1.0 Description: A Remote Code Execution RCE issue exists, allowing a remote malicious user to inject arbitrary code via the image upload field. Recommendations: For Sourcecodester Budg...
CVE-2021-41645: Unrestricted Upload of File with Dangerous Type
Remote Code Execution RCE vulnerability exists in Sourcecodester Budget and Expense Tracker System 1.0 that allows a remote malicious user to inject arbitrary code via the image upload field...
Cross site scripting
A stored cross-site scripting XSS vulnerability in SourceCodester Budget Management System 1.0 allows users to inject and store arbitrary JavaScript code in index.php via vulnerable field 'Budget Title'...
CVE-2021-29388
A stored cross-site scripting XSS vulnerability in SourceCodester Budget Management System 1.0 allows users to inject and store arbitrary JavaScript code in index.php via vulnerable field 'Budget Title'...
Sourcecodester Budget Management System 跨站脚本漏洞
Sourcecodester Budget Management System is a Sourcecodester open source application . Provides a function to calculate the exact cost through a web application. A cross-site scripting vulnerability exists in SourceCodester Budget Management System 1.0 that allows users to inject and store arbitra...
PT-2021-18194
Name of the Vulnerable Software and Affected Versions: SourceCodester Budget Management System version 1.0 Description: A stored cross-site scripting issue allows users to inject and store arbitrary JavaScript code in index.php via the vulnerable field Budget Title. Recommendations: For...
CVE-2021-29388: Improper Neutralization of Input During Web Page Generation
A stored cross-site scripting XSS vulnerability in SourceCodester Budget Management System 1.0 allows users to inject and store arbitrary JavaScript code in index.php via vulnerable field 'Budget Title'...