CVE-2024-7811

SourceCodester Daily Expenses Monitoring App 1.0 contains a SQL injection in the /endpoint/delete-expense.php endpoint caused by unsafely handling the expense parameter. The vulnerability can be exploited remotely (network vector) and affects the endpoint regardless of user interaction. Exploitat...

SourceCodester Daily Expenses Monitoring SQL Injection Vulnerability

SourceCodester Daily Expenses Monitoring is a daily income and expense monitoring platform from SourceCodester, Inc. A SQL injection vulnerability exists in SourceCodester Daily Expenses Monitoring version 1.0, which originates when the expense parameter on the /endpoint/delete-expense.php page...

CVE-2024-7811: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical has been found in SourceCodester Daily Expenses Monitoring App 1.0. This affects an unknown part of the file /endpoint/delete-expense.php. The manipulation of the argument expense leads to sql injection. It is possible to initiate the attack remotely. The...