Expense Management System Security Vulnerabilities and Issues — Expense Management System CVE List

Lucene search

EgavilanmediaExpense Management System

2 matches found

CVE•added 2022/06/02 2:15 p.m.•50 views

CVE-2021-44098

EGavilan Media Expense-Management-System 1.0 is vulnerable to SQL Injection via /expense_action.php. This allows a remote attacker to compromise Application SQL database.

9.8CVSS9.7AI score0.00478EPSS

CVE•added 2020/12/15 4:15 p.m.•29 views

CVE-2020-35395

XSS in the Add Expense Component of EGavilan Media Expense Management System 1.0 allows an attacker to permanently store malicious JavaScript code via the 'description' field

6.1CVSS6AI score0.00234EPSS