SourceCodester Daily Expenses Monitoring App delete-expense.php sql injection

A vulnerability classified as critical has been found in SourceCodester Daily Expenses Monitoring App 1.0. This affects an unknown part of the file /endpoint/delete-expense.php. The manipulation of the argument expense leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

SQL命令中使用的特殊元素转义处理不恰当(SQL注入)

SourceCodester Daily Expenses Monitoring SQL注入漏洞

SourceCodester Daily Expenses Monitoring是SourceCodester公司的一个日常收支监控平台。 SourceCodester Daily Expenses Monitoring 1.0 版本存在SQL注入漏洞，该漏洞源于 /endpoint/delete-expense.php 页面的 expense 参数包含一个 SQL 注入漏洞。

N/A

N/A