Daily expense tracker system
This hub aggregates every CVE we track for Daily expense tracker system, a product in the enterprise software space. Use it to gauge the current risk picture and drill into individual advisories.
15
CVEs tracked
3
Critical
6
High
0
In CISA KEV
Severity distribution
HIGH6MEDIUM5CRITICAL3LOW1
Monthly trend
0
0
0
0
2
0
0
5
1
0
0
0
0
0
0
0
0
0
0
0
0
0
0
3
2024-102026-09
Latest CVEs
The 15 most recently published vulnerabilities affecting Daily expense tracker system.
- CVE-2026-90846PHPGurukul Daily Expense Tracker System forgot-password.php sql injection7.3
- CVE-2026-90845PHPGurukul Daily Expense Tracker System sidebar.php cross site scripting3.5
- CVE-2026-90844PHPGurukul Daily Expense Tracker System Login index.php sql injection7.3
- CVE-2025-5546PHPGurukul Daily Expense Tracker System expense-reports-detailed.php sql injection6.3
- CVE-2025-5368PHPGurukul Daily Expense Tracker System expense-yearwise-reports-detailed.php sql injection6.3
- CVE-2025-4925PHPGurukul Daily Expense Tracker System expense-monthwise-reports-detailed.php sql injection7.3
- CVE-2025-4908PHPGurukul Daily Expense Tracker System expense-datewise-reports-detailed.php sql injection7.3
- CVE-2025-4907PHPGurukul Daily Expense Tracker System forgot-password.php sql injection7.3
- CVE-2025-4785PHPGurukul Daily Expense Tracker System user-profile.php sql injection7.3
- CVE-2025-25351PHPGurukul Daily Expense Tracker System v1.1 is vulnerable to SQL Injection in /dets/add-expense.php via the dateexpense parameter.9.8
- CVE-2025-25349PHPGurukul Daily Expense Tracker System v1.1 is vulnerable to SQL Injection in /dets/add-expense.php via the costitem parameter.9.8
- CVE-2021-26303PHPGurukul Daily Expense Tracker System 1.0 is vulnerable to stored XSS via the user-profile.php Full Name field.6.1
- CVE-2021-26304PHPGurukul Daily Expense Tracker System 1.0 is vulnerable to stored XSS via the add-expense.php Item parameter.5.4
- CVE-2020-10107PHPGurukul Daily Expense Tracker System 1.0 is vulnerable to stored XSS, as demonstrated by the ExpenseItem or ExpenseCost parameter in manage-expense.php.5.4
- CVE-2020-10106PHPGurukul Daily Expense Tracker System 1.0 is vulnerable to SQL injection, as demonstrated by the email parameter in index.php or register.php. The SQL injection allows to dump the MySQL database ...9.8
Product normalization is registry-driven with AI assist and human review. How it works