PHPGurukul Daily Expense Tracker System v1.1 is vulnerable to SQL Injection in /dets/add-expense.php via the dateexpense parameter.
References
| Link | Resource |
|---|---|
| https://github.com/vkcyberexpert/CVE-Writeup/blob/main/PHPGurukul/Daily%20Expense%20Tracker%20System/SQL%20Injection%20dateexpense%20daily%20expense.pdf | Exploit Third Party Advisory |
Configurations
History
No history.
Information
Published : 2025-02-12 16:15
Updated : 2025-05-12 16:15
NVD link : CVE-2025-25351
Mitre link : CVE-2025-25351
CVE.ORG link : CVE-2025-25351
JSON object : View
Products Affected
phpgurukul
- daily_expense_tracker_system
CWE
CWE-89
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
