PHPGurukul Daily Expense Tracker System vulnerabilities

A vulnerability has been found in PHPGurukul Daily Expense Tracker System 1.1. It affects an unknown function in the /dets/forgot-password.php file. Manipulation of the email/contactno argument leads to SQL injection. The attack can be carried out remotely, and the exploit has been publicly disclosed.

A flaw has been found in PHPGurukul Daily Expense Tracker System 1.1. This issue affects some unknown processing of the file /dets/includes/sidebar.php. Executing a manipulation of the argument FullName can lead to cross site scripting. The attack can be executed remotely. The exploit has been published and may be used.

A vulnerability was detected in PHPGurukul Daily Expense Tracker System 1.1. It affects unknown code in the file /dets/index.php of the Login component. Manipulation of the email argument results in SQL injection. The attack can be performed remotely, and the exploit is publicly available.