Egavilanmedia Expense Management System
2 CVEs affecting Egavilanmedia Expense Management System. Latest disclosed: 2022-06-02. Critical: 1, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2021-44098 | Critical | 9.8 | 2022-06-02 | EGavilan Media Expense-Management-System 1.0 is vulnerable to SQL Injection via /expense_action.php. This allows a remote attacker to compromise Application SQ… |
CVE-2020-35395 | Medium | 6.1 | 2020-12-15 | XSS in the Add Expense Component of EGavilan Media Expense Management System 1.0 allows an attacker to permanently store malicious JavaScript code via the 'des… |