Daily Expense Manager

4 CVEs product

Monthly

CVE-2025-40734 MEDIUM This Month

Reflected Cross-Site Scripting (XSS) vulnerability in Daily Expense Manager v1.0. This vulnerability allows an attacker to execute JavaScript code by sending a POST request through the password and confirm_password parameters in /register.php.

PHP XSS Daily Expense Manager
NVD
CVSS 3.1
6.1
EPSS
0.0%
CVE-2025-40733 MEDIUM This Month

Reflected Cross-Site Scripting (XSS) vulnerability in Daily Expense Manager v1.0. This vulnerability allows an attacker to execute JavaScript code by sending a POST request through the username parameter in /login.php.

PHP XSS Daily Expense Manager
NVD
CVSS 3.1
6.1
EPSS
0.0%
CVE-2025-40732 HIGH This Week

A security vulnerability in Daily Expense Manager (CVSS 7.5). High severity vulnerability requiring prompt remediation.

PHP Information Disclosure Daily Expense Manager
NVD
CVSS 3.1
7.5
EPSS
0.0%
CVE-2025-40731 CRITICAL Act Now

SQL injection vulnerability in Daily Expense Manager v1.0. This vulnerability allows an attacker to retrieve, create, update and delete databases through the pname, pprice and id parameters in /update.php.

PHP SQLi Daily Expense Manager
NVD
CVSS 3.1
9.8
EPSS
0.0%
EPSS 0% CVSS 6.1
MEDIUM This Month

Reflected Cross-Site Scripting (XSS) vulnerability in Daily Expense Manager v1.0. This vulnerability allows an attacker to execute JavaScript code by sending a POST request through the password and confirm_password parameters in /register.php.

PHP XSS Daily Expense Manager
NVD
EPSS 0% CVSS 6.1
MEDIUM This Month

Reflected Cross-Site Scripting (XSS) vulnerability in Daily Expense Manager v1.0. This vulnerability allows an attacker to execute JavaScript code by sending a POST request through the username parameter in /login.php.

PHP XSS Daily Expense Manager
NVD
EPSS 0% CVSS 7.5
HIGH This Week

A security vulnerability in Daily Expense Manager (CVSS 7.5). High severity vulnerability requiring prompt remediation.

PHP Information Disclosure Daily Expense Manager
NVD
EPSS 0% CVSS 9.8
CRITICAL Act Now

SQL injection vulnerability in Daily Expense Manager v1.0. This vulnerability allows an attacker to retrieve, create, update and delete databases through the pname, pprice and id parameters in /update.php.

PHP SQLi Daily Expense Manager
NVD

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy