CVE-2025-25349

The CVE concerns PHPGurukul Daily Expense Tracker System v1.1. The vulnerability is a SQL Injection in the /dets/add-expense.php endpoint due to the costitem parameter. Affects PHP-MySQL stack as described; impact is rated HIGH for confidentiality, integrity, and availability (CVSS 3.1: 9.8). The...

CVE-2025-25351

CVE-2025-25351 affects PHPGurukul Daily Expense Tracker System v1.1, where the /dets/add-expense.php endpoint is vulnerable to SQL Injection through the dateexpense parameter. The vulnerability is caused by insufficient input validation/escaping, enabling an attacker to inject SQL statements. Doc...

CVE-2025-5368

PHPGurukul Daily Expense Tracker System v1.1 contains a SQL injection vulnerability in /expense-yearwise-reports-detailed.php caused by unsafely handling the todate parameter. Exploitation is remote and publicly disclosed. Several sources associate this CVE with high-severity impact (credit in so...

CVE-2021-26304

PHPGurukul Daily Expense Tracker System 1.0 is vulnerable to a stored XSS flaw via the add-expense.php Item parameter (CVE-2021-26304). The vulnerability is confirmed across multiple sources in the connected documents; exploitation details beyond “stored XSS via the add-expense.php Item parameter...

CVE-2020-10106

CVE-2020-10106 affects PHPGurukul Daily Expense Tracker System 1.0. The Red Hat/NVD entries confirm a SQL injection via the email parameter in index.php or register.php, enabling dumping of the MySQL database and bypassing the login prompt. The vulnerability is driven by improper handling of user...

CVE-2021-26303

The vulnerability CVE-2021-26303 affects PHPGurukul Daily Expense Tracker System 1.0, where a stored XSS is possible via the user-profile.php Full Name field . The root cause is unsanitized input being stored and later rendered, enabling an attacker to inject script into the profile display. The ...

CVE-2020-10107

CVE-2020-10107: PHPGurukul Daily Expense Tracker System 1.0 is vulnerable to stored XSS, evidenced by the ExpenseItem and ExpenseCost parameters within manage-expense.php. The Red Hat and NVD records corroborate a stored XSS issue affecting this application. No exploitation routes, affected versi...

CVE-2025-5546

PHPGurukul Daily Expense Tracker System 1.1 is affected by a SQL injection in /expense-reports-detailed.php via the fromdate/todate parameters. The issue allows remote attackers to execute arbitrary SQL commands and potentially access sensitive data. Public exploit information is present in sever...

CVE-2025-4785

CVE-2025-4785 affects PHPGurukul Daily Expense Tracker System version 1.1. The vulnerability is a SQL injection in the file /user-profile.php triggered by manipulating the fullname and contactnumber parameters, with remote exploit potential. Multiple connected sources confirm the issue and indica...

CVE-2025-4907

The CVE-2025-4907 entry affects PHPGurukul Daily Expense Tracker System 1.1. A SQL injection vulnerability exists in the forgot-password.php handling of the email parameter. Descriptions from multiple sources indicate remote exploitation is possible and that exploitation details have been disclos...

CVE-2025-4925

Summary of the CVE (CVE-2025-4925) : A SQL injection vulnerability exists in PHPGurukul Daily Expense Tracker System 1.1, triggered by manipulating the fromdate and todate parameters in the file /expense-monthwise-reports-detailed.php. The flaw is exploitable remotely and has been disclosed publi...

CVE-2025-4908

The CVE-2025-4908 entry describes a SQL injection in PHPGurukul Daily Expense Tracker System 1.1, arising from unsafely handling the fromdate/todate parameters in /expense-datewise-reports-detailed.php. Attack is remote-enabled and previously disclosed publicly. Connected sources corroborate the ...