Priority MEDIUM 57
A vulnerability classified as critical was found in PHPGurukul Daily Expense Tracker System 1.1.
CVSS 4.0MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.00438 · Published 2025-06-03 · No fix listed CWE-74
Priority MEDIUM 57
A vulnerability was found in PHPGurukul Daily Expense Tracker System 1.1.
CVSS 4.0MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.00462 · Published 2025-05-31 · No fix listed CWE-74
Priority HIGH 70
A vulnerability has been found in PHPGurukul Daily Expense Tracker System 1.1 and classified as critical.
CVSS 4.0MEDIUM 6.9· Network · No auth · No interaction · EPSS 0.00555 · Published 2025-05-19 · No fix listed CWE-74
Priority HIGH 70
A vulnerability classified as critical has been found in PHPGurukul Daily Expense Tracker System 1.1.
CVSS 4.0MEDIUM 6.9· Network · No auth · No interaction · EPSS 0.00639 · Published 2025-05-19 · No fix listed CWE-74
Priority HIGH 70
A vulnerability was found in PHPGurukul Daily Expense Tracker System 1.1.
CVSS 4.0MEDIUM 6.9· Network · No auth · No interaction · EPSS 0.00639 · Published 2025-05-19 · No fix listed CWE-74
Priority HIGH 70
A vulnerability was found in PHPGurukul Daily Expense Tracker System 1.1.
CVSS 4.0MEDIUM 6.9· Network · No auth · No interaction · EPSS 0.00798 · Published 2025-05-16 · No fix listed CWE-74
Priority HIGH 76
PHPGurukul Daily Expense Tracker System v1.1 is vulnerable to SQL Injection in /dets/add-expense.php via the dateexpense parameter.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00495 · Published 2025-02-12 · No fix listed CWE-89
Priority HIGH 76
PHPGurukul Daily Expense Tracker System v1.1 is vulnerable to SQL Injection in /dets/add-expense.php via the costitem parameter.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00495 · Published 2025-02-12 · No fix listed CWE-89
Priority LOW 29
PHPGurukul Daily Expense Tracker System 1.0 is vulnerable to stored XSS via the user-profile.php Full Name field.
CVSS 3.1MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00791 · Published 2021-01-29 · No fix listed CWE-79
Priority LOW 25
PHPGurukul Daily Expense Tracker System 1.0 is vulnerable to stored XSS via the add-expense.php Item parameter.
CVSS 3.1MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.0059 · Published 2021-01-29 · No fix listed CWE-79
Priority LOW 25
PHPGurukul Daily Expense Tracker System 1.0 is vulnerable to stored XSS, as demonstrated by the ExpenseItem or ExpenseCost parameter in manage-expense.php.
CVSS 3.1MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00531 · Published 2020-03-05 · No fix listed CWE-79
Priority MEDIUM 44
PHPGurukul Daily Expense Tracker System 1.0 is vulnerable to SQL injection, as demonstrated by the email parameter in index.php or register.php.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01184 · Published 2020-03-05 · No fix listed CWE-89
THREATIST.IORead the docs