critical9.8
CVE-2021-44098
EGavilan Media Expense-Management-System 1.0 is vulnerable to SQL Injection via /expense_action.php.
Impact
EGavilan Media Expense-Management-System 1.0 is vulnerable to SQL Injection via /expense_action.php. This allows a remote attacker to compromise Application SQL database.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Egavilanmedia | Expense Management System | Version 1.0 |