← All advisories

Critical severity9.8NVD Advisory· Published Feb 12, 2025· Updated Jun 17, 2026

CVE-2025-25349

CVE-2025-25349

Description

PHPGurukul Daily Expense Tracker System v1.1 is vulnerable to SQL Injection in /dets/add-expense.php via the costitem parameter.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3

Phpgurukul/Daily Expense Tracker System
cpe:2.3:a:phpgurukul:daily_expense_tracker_system:1.1:*:*:*:-:*:*:*
Phpgurukul/Daily Expense Tracking Systemcpe-rescue2 versions
(expand)+ 1 more
- (no CPE)
- (no CPE)range: 1.1

Patches

Vulnerability mechanics

References

1

github.com/vkcyberexpert/CVE-Writeup/blob/main/PHPGurukul/Daily%20Expense%20Tracker%20System/SQL%20Injection%20item%20add-expense%20costitem%20parameter.pdfnvdExploitThird Party Advisory

News mentions

0

No linked articles in our index yet.