critical9.8
CVE-2025-25351
PHPGurukul Daily Expense Tracker System v1.1 is vulnerable to SQL Injection in /dets/add-expense.php via the dateexpense parameter.
Impact
PHPGurukul Daily Expense Tracker System v1.1 is vulnerable to SQL Injection in /dets/add-expense.php via the dateexpense parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Phpgurukul | Daily Expense Tracker System | Version 1.1 |