critical9.8
CVE-2021-40247
SQL injection vulnerability in Sourcecodester Budget and Expense Tracker System v1 by oretnom23, allows attackers to execute arbitrary SQL commands via the use…
Impact
SQL injection vulnerability in Sourcecodester Budget and Expense Tracker System v1 by oretnom23, allows attackers to execute arbitrary SQL commands via the username field.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Oretnom23 | Budget And Expense Tracker System | Version 1.0 |
Weakness classification
References
- NVD record
- CVE.org record
- https://github.com/nu11secur1ty/CVE-nu11secur1ty/tree/main/vendors/B%26E%20Tracker-by:oretnom23-v1.0
- https://www.sourcecodester.com/php/14893/budget-and-expense-tracker-system-php-free-source-code.html
- https://github.com/nu11secur1ty/CVE-nu11secur1ty/tree/main/vendors/B%26E%20Tracker-by:oretnom23-v1.0
- https://www.sourcecodester.com/php/14893/budget-and-expense-tracker-system-php-free-source-code.html