Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2624▼ 223 respecto a la semana anterior
Críticas / altas1373▲ 144 respecto a la semana anterior
Nueva explotación activa (KEV)7▼ 3 respecto a la semana anterior
Sin puntuar (sin CVSS)81▼ 449 respecto a la semana anterior
30 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Aplazada | Media (5.5) | 0.43% | — | Phpgurukul Daily Expense Tracker SystemAI | 15/9/2026 | 15/9/2026 | A vulnerability has been found in PHPGurukul Daily Expense Tracker System 1.1. Impacted is an unknown function of the file /dets/forgot-password.php. The manipulation of the argument email/contactno leads to sql injection. The attack is possible to be carried out remotely. The exploit has been disclosed to the public… | |
| Aplazada | Baja (2) | 0.35% | — | Phpgurukul Daily Expense Tracker SystemAI | 15/9/2026 | 15/9/2026 | A flaw has been found in PHPGurukul Daily Expense Tracker System 1.1. This issue affects some unknown processing of the file /dets/includes/sidebar.php. Executing a manipulation of the argument FullName can lead to cross site scripting. The attack can be executed remotely. The exploit has been published and may be… | |
| Aplazada | Media (5.5) | 0.43% | — | Phpgurukul Daily Expense Tracker SystemAI | 15/9/2026 | 15/9/2026 | A vulnerability was detected in PHPGurukul Daily Expense Tracker System 1.1. This vulnerability affects unknown code of the file /dets/index.php of the component Login. Performing a manipulation of the argument email results in sql injection. Remote exploitation of the attack is possible. The exploit is now public and… | |
| Analizada | Media (5.3) | 0.40% | — | Phpgurukul Daily Expense Tracker System | 4/6/2025 | 17/6/2026 | A vulnerability classified as critical was found in PHPGurukul Daily Expense Tracker System 1.1. This vulnerability affects unknown code of the file /expense-reports-detailed.php. The manipulation of the argument fromdate/todate leads to sql injection. The attack can be initiated remotely. The exploit has been… | |
| Analizada | Media (5.3) | 0.42% | — | Phpgurukul Daily Expense Tracker System | 31/5/2025 | 17/6/2026 | A vulnerability was found in PHPGurukul Daily Expense Tracker System 1.1. It has been rated as critical. This issue affects some unknown processing of the file /expense-yearwise-reports-detailed.php. The manipulation of the argument todate leads to sql injection. The attack may be initiated remotely. The exploit has… | |
| Analizada | Media (6.9) | 0.51% | — | Phpgurukul Daily Expense Tracker System | 19/5/2025 | 17/6/2026 | A vulnerability has been found in PHPGurukul Daily Expense Tracker System 1.1 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /expense-monthwise-reports-detailed.php. The manipulation of the argument fromdate/todate leads to sql injection. The attack can be launched… | |
| Analizada | Media (6.9) | 0.58% | — | Phpgurukul Daily Expense Tracker System | 19/5/2025 | 17/6/2026 | A vulnerability classified as critical has been found in PHPGurukul Daily Expense Tracker System 1.1. This affects an unknown part of the file /expense-datewise-reports-detailed.php. The manipulation of the argument fromdate/todate leads to sql injection. It is possible to initiate the attack remotely. The exploit has… | |
| Analizada | Media (6.9) | 0.58% | — | Phpgurukul Daily Expense Tracker System | 19/5/2025 | 17/6/2026 | A vulnerability was found in PHPGurukul Daily Expense Tracker System 1.1. It has been rated as critical. Affected by this issue is some unknown functionality of the file /forgot-password.php. The manipulation of the argument email leads to sql injection. The attack may be launched remotely. The exploit has been… | |
| Analizada | Media (6.9) | 0.73% | — | Phpgurukul Daily Expense Tracker System | 16/5/2025 | 17/6/2026 | A vulnerability was found in PHPGurukul Daily Expense Tracker System 1.1. It has been rated as critical. Affected by this issue is some unknown functionality of the file /user-profile.php. The manipulation of the argument fullname/contactnumber leads to sql injection. The attack may be launched remotely. The exploit… | |
| Analizada | Media (6.9) | 0.51% | — | Anujk305 Daily Expense Tracker | 16/5/2025 | 17/6/2026 | A vulnerability was found in PHPGurukul Daily Expense Tracker 1.1 and classified as critical. Affected by this issue is some unknown functionality of the file /register.php. The manipulation of the argument email leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public… | |
| Modificada | Crítica (9.8) | 0.50% | — | Phpgurukul Daily Expense Tracker System | 12/2/2025 | 17/6/2026 | PHPGurukul Daily Expense Tracker System v1.1 is vulnerable to SQL Injection in /dets/add-expense.php via the dateexpense parameter. | |
| Modificada | Crítica (9.8) | 0.50% | — | Phpgurukul Daily Expense Tracker System | 12/2/2025 | 17/6/2026 | PHPGurukul Daily Expense Tracker System v1.1 is vulnerable to SQL Injection in /dets/add-expense.php via the costitem parameter. | |
| Modificada | Crítica (9.8) | 0.81% | — | Rems Simple Expense Tracker APP | 14/2/2024 | 17/6/2026 | Simple Expense Tracker v1.0 was discovered to contain a SQL injection vulnerability via the category parameter at /endpoint/delete_category.php. | |
| Modificada | Crítica (9.8) | 0.81% | — | Rems Simple Expense Tracker APP | 14/2/2024 | 17/6/2026 | Simple Expense Tracker v1.0 was discovered to contain a SQL injection vulnerability via the expense parameter at /endpoint/delete_expense.php. | |
| Modificada | Alta (7.2) | 0.63% | — | Oretnom23 Budget AND Expense Tracker System | 16/1/2024 | 17/6/2026 | Budget and Expense Tracker System v1.0 is vulnerable to SQL Injection via /expense_budget/admin/?page=reports/budget&date_start=2023-12-28&date_end= | |
| Modificada | Media (5.4) | 0.50% | — | Oretnom23 Expense Tracker | 29/9/2023 | 17/6/2026 | A vulnerability, which was classified as problematic, has been found in SourceCodester Expense Tracker App v1. Affected by this issue is some unknown functionality of the file add_category.php of the component Category Handler. The manipulation of the argument category_name leads to cross site scripting. The attack… | |
| Modificada | Media (5.4) | 0.43% | — | Oretnom23 Expense Tracker | 27/9/2023 | 17/6/2026 | Sourcecodester Expense Tracker App v1 is vulnerable to Cross Site Scripting (XSS) via add category. | |
| Modificada | Alta (8.8) | 0.73% | — | Oretnom23 Budget AND Expense Tracker System | 17/5/2023 | 17/6/2026 | A vulnerability, which was classified as critical, was found in SourceCodester Budget and Expense Tracker System 1.0. Affected is an unknown function of the file /admin/budget/manage_budget.php of the component GET Parameter Handler. The manipulation of the argument id leads to sql injection. It is possible to launch… | |
| Modificada | Alta (7.5) | 0.58% | — | Earnings AND Expense Tracker APP Project Earnings AND Expense Tracker APP | 5/4/2023 | 17/6/2026 | A vulnerability was found in SourceCodester Earnings and Expense Tracker App 1.0. It has been classified as problematic. This affects an unknown part of the file index.php. The manipulation of the argument page leads to information disclosure. It is possible to initiate the attack remotely. The identifier VDB-224997… | |
| Modificada | Crítica (9.8) | 0.74% | — | Earnings AND Expense Tracker APP Project Earnings AND Expense Tracker APP | 31/3/2023 | 17/6/2026 | A vulnerability was found in SourceCodester Earnings and Expense Tracker App 1.0. It has been classified as critical. Affected is an unknown function of the file manage_user.php. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. The identifier of this… | |
| Modificada | Media (6.1) | 0.36% | — | Earnings AND Expense Tracker APP Project Earnings AND Expense Tracker APP | 29/3/2023 | 17/6/2026 | A vulnerability, which was classified as problematic, has been found in SourceCodester Earnings and Expense Tracker App 1.0. This issue affects some unknown processing of the file LoginRegistration.php?a=register_user. The manipulation of the argument fullname leads to cross site scripting. The attack may be initiated… | |
| Modificada | Media (6.1) | 0.36% | — | Earnings AND Expense Tracker APP Project Earnings AND Expense Tracker APP | 29/3/2023 | 17/6/2026 | A vulnerability classified as problematic was found in SourceCodester Earnings and Expense Tracker App 1.0. This vulnerability affects unknown code of the file Master.php?a=save_earning. The manipulation of the argument name leads to cross site scripting. The attack can be initiated remotely. The identifier of this… | |
| Modificada | Media (6.1) | 0.36% | — | Oretnom23 Earnings AND Expense Tracker Application | 29/3/2023 | 17/6/2026 | A vulnerability classified as problematic has been found in SourceCodester Earnings and Expense Tracker App 1.0. This affects an unknown part of the file Master.php?a=save_expense. The manipulation of the argument name leads to cross site scripting. It is possible to initiate the attack remotely. The associated… | |
| Modificada | Media (5.4) | 0.47% | — | Oretnom23 Expense Tracker | 15/12/2022 | 17/6/2026 | A cross-site scripting (XSS) vulnerability in Expense Tracker 1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Chat text field. | |
| Modificada | Crítica (9.8) | 2.6% | — | Oretnom23 Budget AND Expense Tracker System | 21/1/2022 | 17/6/2026 | SQL injection vulnerability in Sourcecodester Budget and Expense Tracker System v1 by oretnom23, allows attackers to execute arbitrary SQL commands via the username field. |