CVE-2024-5048

The CVE-2024-5048 entry concerns code-projects Budget Management 1.0. The vulnerability is triggered via the /index.php file, where manipulating the edit parameter enables SQL injection. Attackers can exploit remotely, and public disclosures exist (exploit disclosed). The issue is supported by mu...

CVE-2024-34954

Code-projects Budget Management version 1.0 is vulnerable to Cross-Site Scripting (XSS) . The vulnerability exists because the application fails to properly neutralize input during web page generation specifically via the budget parameter . This flaw allows for potential malicious script injectio...

CVE-2024-34955

Code-projects Budget Management version 1.0 is vulnerable to SQL Injection due to improper neutralization of special elements in the delete parameter . This flaw allows for the potential manipulation of database queries. As a temporary workaround, it is recommended to restrict access to the delet...