Unscored CVE-2021-44098 EUVD-2021-30956GHSA-2r88-ww5g-vx3h

EGavilan Media Expense-Management-System 1.0 is vulnerable to SQL Injection via /expense_action.php. This allows a remote attacker to compr…

Published May 31, 2022 · Updated Aug 4, 2024 · Assigned by mitre

Description

EGavilan Media Expense-Management-System 1.0 is vulnerable to SQL Injection via /expense_action.php. This allows a remote attacker to compromise Application SQL database.

References

https://github.com/EGavilan-Media/Expense-Management-System/issues/1
https://medium.com/%40shubhamvpandey/cve-2021-44098-8dbaced8b854