VYPR
Unrated severityNVD Advisory· Published Jun 3, 2025· Updated Jun 4, 2025

PHPGurukul Daily Expense Tracker System expense-reports-detailed.php sql injection

CVE-2025-5546

Description

A vulnerability classified as critical was found in PHPGurukul Daily Expense Tracker System 1.1. This vulnerability affects unknown code of the file /expense-reports-detailed.php. The manipulation of the argument fromdate/todate leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.

Affected products

2

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

5

News mentions

0

No linked articles in our index yet.