Phpgurukul

Daily Expense Tracker System

15 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
7.5

CVE-2026-90846

  • EPSS 0.26%
  • Veröffentlicht 15.09.2026 01:16:54
  • Zuletzt bearbeitet 15.09.2026 15:17:30

A vulnerability has been found in PHPGurukul Daily Expense Tracker System 1.1. Impacted is an unknown function of the file /dets/forgot-password.php. The manipulation of the argument email/contactno leads to sql injection. The attack is possible to b...

4

CVE-2026-90845

Exploit
  • EPSS 0.2%
  • Veröffentlicht 15.09.2026 00:30:08
  • Zuletzt bearbeitet 15.09.2026 14:37:14

A flaw has been found in PHPGurukul Daily Expense Tracker System 1.1. This issue affects some unknown processing of the file /dets/includes/sidebar.php. Executing a manipulation of the argument FullName can lead to cross site scripting. The attack ca...

7.5

CVE-2026-90844

Exploit
  • EPSS 0.26%
  • Veröffentlicht 15.09.2026 00:15:08
  • Zuletzt bearbeitet 15.09.2026 14:37:14

A vulnerability was detected in PHPGurukul Daily Expense Tracker System 1.1. This vulnerability affects unknown code of the file /dets/index.php of the component Login. Performing a manipulation of the argument email results in sql injection. Remote ...

8.8

CVE-2025-5546

Exploit
  • EPSS 0.34%
  • Veröffentlicht 03.06.2025 23:31:08
  • Zuletzt bearbeitet 10.06.2025 15:15:55

A vulnerability classified as critical was found in PHPGurukul Daily Expense Tracker System 1.1. This vulnerability affects unknown code of the file /expense-reports-detailed.php. The manipulation of the argument fromdate/todate leads to sql injectio...

8.8

CVE-2025-5368

Exploit
  • EPSS 0.36%
  • Veröffentlicht 31.05.2025 04:15:28
  • Zuletzt bearbeitet 03.06.2025 15:32:13

A vulnerability was found in PHPGurukul Daily Expense Tracker System 1.1. It has been rated as critical. This issue affects some unknown processing of the file /expense-yearwise-reports-detailed.php. The manipulation of the argument todate leads to s...

9.8

CVE-2025-4925

Exploit
  • EPSS 0.51%
  • Veröffentlicht 19.05.2025 09:15:25
  • Zuletzt bearbeitet 21.05.2025 12:58:28

A vulnerability has been found in PHPGurukul Daily Expense Tracker System 1.1 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /expense-monthwise-reports-detailed.php. The manipulation of the argument...

9.8

CVE-2025-4908

Exploit
  • EPSS 0.58%
  • Veröffentlicht 19.05.2025 03:00:09
  • Zuletzt bearbeitet 21.05.2025 17:25:58

A vulnerability classified as critical has been found in PHPGurukul Daily Expense Tracker System 1.1. This affects an unknown part of the file /expense-datewise-reports-detailed.php. The manipulation of the argument fromdate/todate leads to sql injec...

9.8

CVE-2025-4907

Exploit
  • EPSS 0.58%
  • Veröffentlicht 19.05.2025 02:31:05
  • Zuletzt bearbeitet 21.05.2025 17:33:11

A vulnerability was found in PHPGurukul Daily Expense Tracker System 1.1. It has been rated as critical. Affected by this issue is some unknown functionality of the file /forgot-password.php. The manipulation of the argument email leads to sql inject...

9.8

CVE-2025-4785

Exploit
  • EPSS 0.73%
  • Veröffentlicht 16.05.2025 15:00:10
  • Zuletzt bearbeitet 21.05.2025 21:00:19

A vulnerability was found in PHPGurukul Daily Expense Tracker System 1.1. It has been rated as critical. Affected by this issue is some unknown functionality of the file /user-profile.php. The manipulation of the argument fullname/contactnumber leads...

9.8

CVE-2025-25349

Exploit
  • EPSS 0.49%
  • Veröffentlicht 12.02.2025 16:15:46
  • Zuletzt bearbeitet 05.03.2025 19:15:38

PHPGurukul Daily Expense Tracker System v1.1 is vulnerable to SQL Injection in /dets/add-expense.php via the costitem parameter.