Daily Expense Tracker System
15 CVEs tracked. None of them is in CISA KEV.
This hub aggregates every CVE we track for Daily Expense Tracker System, a product in the enterprise software space. Use it to gauge the current risk picture and drill into individual advisories.
Daily Expense Tracker System CVEs per month
| Month | CVEs |
|---|---|
| 2024-10 | 0 |
| 2024-11 | 0 |
| 2024-12 | 0 |
| 2025-01 | 0 |
| 2025-02 | 2 |
| 2025-03 | 0 |
| 2025-04 | 0 |
| 2025-05 | 5 |
| 2025-06 | 1 |
| 2025-07 | 0 |
| 2025-08 | 0 |
| 2025-09 | 0 |
| 2025-10 | 0 |
| 2025-11 | 0 |
| 2025-12 | 0 |
| 2026-01 | 0 |
| 2026-02 | 0 |
| 2026-03 | 0 |
| 2026-04 | 0 |
| 2026-05 | 0 |
| 2026-06 | 0 |
| 2026-07 | 0 |
| 2026-08 | 0 |
| 2026-09 | 3 |
Severity
How the 15 CVEs score on CVSS. Severity is not exploitation: KEV is counted above.
- Critical3
- High6
- Medium5
- Low1
Latest CVEs
The 15 most recently published vulnerabilities affecting Daily Expense Tracker System.
- CVE-2026-90846PHPGurukul Daily Expense Tracker System forgot-password.php sql injection7.3
- CVE-2026-90845PHPGurukul Daily Expense Tracker System sidebar.php cross site scripting3.5
- CVE-2026-90844PHPGurukul Daily Expense Tracker System Login index.php sql injection7.3
- CVE-2025-5546PHPGurukul Daily Expense Tracker System expense-reports-detailed.php sql injection6.3
- CVE-2025-5368PHPGurukul Daily Expense Tracker System expense-yearwise-reports-detailed.php sql injection6.3
- CVE-2025-4925PHPGurukul Daily Expense Tracker System expense-monthwise-reports-detailed.php sql injection7.3
- CVE-2025-4908PHPGurukul Daily Expense Tracker System expense-datewise-reports-detailed.php sql injection7.3
- CVE-2025-4907PHPGurukul Daily Expense Tracker System forgot-password.php sql injection7.3
- CVE-2025-4785PHPGurukul Daily Expense Tracker System user-profile.php sql injection7.3
- CVE-2025-25351PHPGurukul Daily Expense Tracker System v1.1 is vulnerable to SQL Injection in /dets/add-expense.php via the dateexpense parameter.9.8
- CVE-2025-25349PHPGurukul Daily Expense Tracker System v1.1 is vulnerable to SQL Injection in /dets/add-expense.php via the costitem parameter.9.8
- CVE-2021-26303PHPGurukul Daily Expense Tracker System 1.0 is vulnerable to stored XSS via the user-profile.php Full Name field.6.1
- CVE-2021-26304PHPGurukul Daily Expense Tracker System 1.0 is vulnerable to stored XSS via the add-expense.php Item parameter.5.4
- CVE-2020-10107PHPGurukul Daily Expense Tracker System 1.0 is vulnerable to stored XSS, as demonstrated by the ExpenseItem or ExpenseCost parameter in manage-expense.php.5.4
- CVE-2020-10106PHPGurukul Daily Expense Tracker System 1.0 is vulnerable to SQL injection, as demonstrated by the email parameter in index.php or register.php. The SQL injection allows to dump the MySQL database ...9.8
Product grouping is registry-driven, with AI assist and human review. How it works