Vendors / PHPGurukul Records 1122 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 133
CVSS high 107
Exploited now PHPGurukul records in CISA KEV No PHPGurukul vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority HIGH 76
PHPGurukul Daily Expense Tracker System v1.1 is vulnerable to SQL Injection in /dets/add-expense.php via the dateexpense parameter.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00495 · Published 2025-02-12 · No fix listed CWE-89
Priority HIGH 76
PHPGurukul Daily Expense Tracker System v1.1 is vulnerable to SQL Injection in /dets/add-expense.php via the costitem parameter.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00495 · Published 2025-02-12 · No fix listed CWE-89
Priority HIGH 70
A vulnerability has been found in PHPGurukul Daily Expense Tracker System 1.1 and classified as critical.
CVSS 4.0 MEDIUM 6.9· Network · No auth · No interaction · EPSS 0.00555 · Published 2025-05-19 · No fix listed CWE-74
Priority HIGH 70
A vulnerability classified as critical has been found in PHPGurukul Daily Expense Tracker System 1.1.
CVSS 4.0 MEDIUM 6.9· Network · No auth · No interaction · EPSS 0.00639 · Published 2025-05-19 · No fix listed CWE-74
Priority HIGH 70
A vulnerability was found in PHPGurukul Daily Expense Tracker System 1.1.
CVSS 4.0 MEDIUM 6.9· Network · No auth · No interaction · EPSS 0.00639 · Published 2025-05-19 · No fix listed CWE-74
Priority HIGH 70
A vulnerability was found in PHPGurukul Daily Expense Tracker System 1.1.
CVSS 4.0 MEDIUM 6.9· Network · No auth · No interaction · EPSS 0.00798 · Published 2025-05-16 · No fix listed CWE-74
Priority MEDIUM 57
A vulnerability classified as critical was found in PHPGurukul Daily Expense Tracker System 1.1.
CVSS 4.0 MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.00438 · Published 2025-06-03 · No fix listed CWE-74
Priority MEDIUM 57
A vulnerability was found in PHPGurukul Daily Expense Tracker System 1.1.
CVSS 4.0 MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.00462 · Published 2025-05-31 · No fix listed CWE-74
Priority MEDIUM 44
PHPGurukul Daily Expense Tracker System 1.0 is vulnerable to SQL injection, as demonstrated by the email parameter in index.php or register.php.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01184 · Published 2020-03-05 · No fix listed CWE-89
Priority LOW 29
PHPGurukul Daily Expense Tracker System 1.0 is vulnerable to stored XSS via the user-profile.php Full Name field.
CVSS 3.1 MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00791 · Published 2021-01-29 · No fix listed CWE-79
Priority LOW 25
PHPGurukul Daily Expense Tracker System 1.0 is vulnerable to stored XSS via the add-expense.php Item parameter.
CVSS 3.1 MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.0059 · Published 2021-01-29 · No fix listed CWE-79
Priority LOW 25
PHPGurukul Daily Expense Tracker System 1.0 is vulnerable to stored XSS, as demonstrated by the ExpenseItem or ExpenseCost parameter in manage-expense.php.
CVSS 3.1 MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00531 · Published 2020-03-05 · No fix listed CWE-79
Open these records in search → All records by CVSS severity
133 107 877 5 0
THREATIST.IORead the docs