← Back

Daily Expense Manager

daily_expense_manager

Vendor: Code Projects • 4 CVEs

CVEs (4)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2025-40734
1Code Projects
1Daily Expense Manager
Jun 17, 2026
Jun 30, 2025
5.1 MEDIUM· v4
6.1 MEDIUM· v3
N/A· v2
Reflected Cross-Site Scripting (XSS) vulnerability in Daily Expense Manager v1.0. This vulnerability allows an attacker to execute JavaScript code by sending a POST request through the password and confirm_password param...Show more
Reflected Cross-Site Scripting (XSS) vulnerability in Daily Expense Manager v1.0. This vulnerability allows an attacker to execute JavaScript code by sending a POST request through the password and confirm_password parameters in /register.php.Show less
CVE-2025-40733
1Code Projects
1Daily Expense Manager
Jun 17, 2026
Jun 30, 2025
5.1 MEDIUM· v4
6.1 MEDIUM· v3
N/A· v2
Reflected Cross-Site Scripting (XSS) vulnerability in Daily Expense Manager v1.0. This vulnerability allows an attacker to execute JavaScript code by sending a POST request through the username parameter in /login.php.
CVE-2025-40732
1Code Projects
1Daily Expense Manager
Jun 17, 2026
Jun 30, 2025
8.7 HIGH· v4
7.5 HIGH· v3
N/A· v2
user enumeration vulnerability in Daily Expense Manager v1.0. To exploit this vulnerability a POST request must be sent using the name parameter in /check.php
CVE-2025-40731
1Code Projects
1Daily Expense Manager
Jun 17, 2026
Jun 30, 2025
8.7 HIGH· v4
9.8 CRITICAL· v3
N/A· v2
SQL injection vulnerability in Daily Expense Manager v1.0. This vulnerability allows an attacker to retrieve, create, update and delete databases through the pname, pprice and id parameters in /update.php.