Code-projects

Daily Expense Manager

5 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
5.5

CVE-2026-86179

Exploit
  • EPSS 0.32%
  • Veröffentlicht 06.09.2026 07:45:13
  • Zuletzt bearbeitet 08.09.2026 18:21:16

A flaw has been found in code-projects Daily Expense Manager 1.0. Affected is an unknown function of the file /Daily-Expense-Manager/exp_ak.sql of the component Database Backup Handler. Executing a manipulation can lead to information disclosure. It ...

6.1

CVE-2025-40734

  • EPSS 0.18%
  • Veröffentlicht 30.06.2025 08:31:31
  • Zuletzt bearbeitet 07.07.2025 18:17:48

Reflected Cross-Site Scripting (XSS) vulnerability in Daily Expense Manager v1.0. This vulnerability allows an attacker to execute JavaScript code by sending a POST request through the password and confirm_password parameters in /register.php.

6.1

CVE-2025-40733

  • EPSS 0.18%
  • Veröffentlicht 30.06.2025 08:31:15
  • Zuletzt bearbeitet 07.07.2025 18:18:08

Reflected Cross-Site Scripting (XSS) vulnerability in Daily Expense Manager v1.0. This vulnerability allows an attacker to execute JavaScript code by sending a POST request through the username parameter in /login.php.

7.5

CVE-2025-40732

  • EPSS 0.29%
  • Veröffentlicht 30.06.2025 08:30:06
  • Zuletzt bearbeitet 07.07.2025 19:38:33

user enumeration vulnerability in Daily Expense Manager v1.0. To exploit this vulnerability a POST request must be sent using the name parameter in /check.php

9.8

CVE-2025-40731

  • EPSS 0.3%
  • Veröffentlicht 30.06.2025 08:29:16
  • Zuletzt bearbeitet 07.07.2025 19:33:55

SQL injection vulnerability in Daily Expense Manager v1.0. This vulnerability allows an attacker to retrieve, create, update and delete databases through the pname, pprice and id parameters in /update.php.