CVE-2025-40731

CVE-2025-40731 is a SQL injection vulnerability in Daily Expense Manager v1.0 affecting the /update.php endpoint, exploitable via the pname, pprice and id parameters. The vulnerability allows an attacker to retrieve, create, update and delete databases as described in the cited sources. Affected ...