Approved changes feed: RSS · Atom

cpe:2.3:a:code-projects:daily_expense_manager:1.0:*:*:*:*:*:*:*

part: a version: 1.0 update: *

VendorCode Projects (a64d3912-7513-5560-97cf-6216c4da48a5)
ProductDaily Expense Manager (25112622-2cbe-5757-87d5-266df4da2274)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-40734 vulnerable 2026-06-03 15:01:13.290895 Reflected Cross-Site Scripting (XSS) vulnerability in Daily Expense Manager
Reflected Cross-Site Scripting (XSS) vulnerability in Daily Expense Manager v1.0. This vulnerability allows an attacker to execute JavaScript code by sending a POST request through the password and confirm_password parameters in /register.php.
Published: 2025-06-30T08:31:31.057Z
Updated: 2025-06-30T17:38:04.889Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-40733 vulnerable 2026-06-03 15:01:13.290588 Reflected Cross-Site Scripting (XSS) vulnerability in Daily Expense Manager
Reflected Cross-Site Scripting (XSS) vulnerability in Daily Expense Manager v1.0. This vulnerability allows an attacker to execute JavaScript code by sending a POST request through the username parameter in /login.php.
Published: 2025-06-30T08:31:15.999Z
Updated: 2025-06-30T17:42:10.681Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-40732 vulnerable 2026-06-03 15:01:13.290244 User enumeration vulnerability in Daily Expense Manager
user enumeration vulnerability in Daily Expense Manager v1.0. To exploit this vulnerability a POST request must be sent using the name parameter in /check.php
Published: 2025-06-30T08:30:06.701Z
Updated: 2025-06-30T17:44:46.901Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-40731 vulnerable 2026-06-03 15:01:13.289710 SQL injection vulnerability in Daily Expense Manager
SQL injection vulnerability in Daily Expense Manager v1.0. This vulnerability allows an attacker to retrieve, create, update and delete databases through the pname, pprice and id parameters in /update.php.
Published: 2025-06-30T08:29:16.740Z
Updated: 2025-06-30T17:45:19.929Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.