oretnom23 expense tracker 1.0 vulnerabilities and exploits

(subscribe to this query)

5.4

CVSSv3

A vulnerability, which was classified as problematic, has been found in SourceCodester Expense Tracker App v1. Affected by this issue is some unknown functionality of the file add_category.php of the component Category Handler. The manipulation of the argument category_name leads...

Oretnom23 Expense Tracker 1.0

5.4

CVSSv3

A cross-site scripting (XSS) vulnerability in Expense Tracker 1.0 allows malicious users to execute arbitrary web scripts or HTML via a crafted payload injected into the Chat text field.

Oretnom23 Expense Tracker 1.0

5.4

CVSSv3

Sourcecodester Expense Tracker App v1 is vulnerable to Cross Site Scripting (XSS) via add category.

Oretnom23 Expense Tracker 1.0

1 Github repository

9.8

CVSSv3

SQL injection vulnerability in Sourcecodester Budget and Expense Tracker System v1 by oretnom23, allows malicious users to execute arbitrary SQL commands via the username field.

Oretnom23 Budget And Expense Tracker System 1.0

6.1

CVSSv3

A vulnerability classified as problematic has been found in SourceCodester Earnings and Expense Tracker App 1.0. This affects an unknown part of the file Master.php?a=save_expense. The manipulation of the argument name leads to cross site scripting. It is possible to initiate the...

Oretnom23 Earnings And Expense Tracker Application 1.0

8.8

CVSSv3

A vulnerability, which was classified as critical, was found in SourceCodester Budget and Expense Tracker System 1.0. Affected is an unknown function of the file /admin/budget/manage_budget.php of the component GET Parameter Handler. The manipulation of the argument id leads to s...

Oretnom23 Budget And Expense Tracker System 1.0

8.8

CVSSv3

Remote Code Execution (RCE) vulnerability exists in Sourcecodester Budget and Expense Tracker System 1.0 that allows a remote malicious user to inject arbitrary code via the image upload field. .

Oretnom23 Budget And Expense Tracker System 1.0

7.2

CVSSv3

Budget and Expense Tracker System v1.0 is vulnerable to SQL Injection via /expense_budget/admin/?page=reports/budget&date_start=2023-12-28&date_end=

Oretnom23 Budget And Expense Tracker System 1.0

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook