Critical severity9.8OSV Advisory· Published Oct 24, 2024· Updated Jun 17, 2026
CVE-2024-41618
CVE-2024-41618
Description
Money Manager EX WebApp (web-money-manager-ex) 1.2.2 is vulnerable to SQL Injection in the transaction_delete_group function. The vulnerability is due to improper sanitization of user input in the TrDeleteArr parameter, which is directly incorporated into an SQL query.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2v1.0.1, v1.0.2, v1.0.3, …+ 1 more
- (no CPE)range: v1.0.1, v1.0.2, v1.0.3, …
- (no CPE)range: <1.2.3
Patches
Vulnerability mechanics
References
4News mentions
0No linked articles in our index yet.