critical9.8
CVE-2025-40731
SQL injection vulnerability in Daily Expense Manager v1.0.
Impact
SQL injection vulnerability in Daily Expense Manager v1.0. This vulnerability allows an attacker to retrieve, create, update and delete databases through the pname, pprice and id parameters in /update.php.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Code-Projects | Daily Expense Manager | Version 1.0 |