Daily Expense Tracker System (Phpgurukul) - vulnerabilities (CVEs)
15 CVEs, 0 in the last 30 days, 8 known versions, newest CVE from 2026-09-15. Vendor: Phpgurukul.
CVEs of Daily Expense Tracker System
- CVE-2026-90846 - CVSS 7.3 (high), 2026-09-15: A vulnerability has been found in PHPGurukul Daily Expense Tracker System 1.1. Impacted is an unknown function of the file /dets/forgot-password.php. The…
- CVE-2026-90845 - CVSS 5.1 (medium), 2026-09-15: A flaw has been found in PHPGurukul Daily Expense Tracker System 1.1. This issue affects some unknown processing of the file /dets/includes/sidebar.php.…
- CVE-2026-90844 - CVSS 7.3 (high), 2026-09-15: A vulnerability was detected in PHPGurukul Daily Expense Tracker System 1.1. This vulnerability affects unknown code of the file /dets/index.php of the…
- CVE-2025-5546 - CVSS 8.8 (high), 2025-06-04: A vulnerability classified as critical was found in PHPGurukul Daily Expense Tracker System 1.1. This vulnerability affects unknown code of the file…
- CVE-2025-5368 - CVSS 8.8 (high), 2025-05-31: A vulnerability was found in PHPGurukul Daily Expense Tracker System 1.1. It has been rated as critical. This issue affects some unknown processing of the…
- CVE-2025-4925 - CVSS 9.8 (critical), 2025-05-19: A vulnerability has been found in PHPGurukul Daily Expense Tracker System 1.1 and classified as critical. Affected by this vulnerability is an unknown…
- CVE-2025-4907 - CVSS 9.8 (critical), 2025-05-19: A vulnerability was found in PHPGurukul Daily Expense Tracker System 1.1. It has been rated as critical. Affected by this issue is some unknown functionality…
- CVE-2025-4908 - CVSS 9.8 (critical), 2025-05-19: A vulnerability classified as critical has been found in PHPGurukul Daily Expense Tracker System 1.1. This affects an unknown part of the file…
- CVE-2025-4785 - CVSS 9.8 (critical), 2025-05-16: A vulnerability was found in PHPGurukul Daily Expense Tracker System 1.1. It has been rated as critical. Affected by this issue is some unknown functionality…
- CVE-2025-25351 - CVSS 9.8 (critical), 2025-02-12: PHPGurukul Daily Expense Tracker System v1.1 is vulnerable to SQL Injection in /dets/add-expense.php via the dateexpense parameter.
- CVE-2025-25349 - CVSS 9.8 (critical), 2025-02-12: PHPGurukul Daily Expense Tracker System v1.1 is vulnerable to SQL Injection in /dets/add-expense.php via the costitem parameter.
- CVE-2021-26303 - CVSS 6.1 (medium), 2021-01-29: PHPGurukul Daily Expense Tracker System 1.0 is vulnerable to stored XSS via the user-profile.php Full Name field.
- CVE-2021-26304 - CVSS 5.4 (medium), 2021-01-29: PHPGurukul Daily Expense Tracker System 1.0 is vulnerable to stored XSS via the add-expense.php Item parameter.
- CVE-2020-10107 - CVSS 5.4 (medium), 2020-03-05: PHPGurukul Daily Expense Tracker System 1.0 is vulnerable to stored XSS, as demonstrated by the ExpenseItem or ExpenseCost parameter in manage-expense.php.
- CVE-2020-10106 - CVSS 9.8 (critical), 2020-03-05: PHPGurukul Daily Expense Tracker System 1.0 is vulnerable to SQL injection, as demonstrated by the email parameter in index.php or register.php. The SQL…
