Oretnom23 Expense Management System
4 CVEs affecting Oretnom23 Expense Management System. Latest disclosed: 2024-01-30. Critical: 0, High: 2.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-44824 | High | 7.8 | 2023-10-17 | An issue in Expense Management System v.1.0 allows a local attacker to execute arbitrary code via a crafted file uploaded to the sign-up.php component. |
CVE-2022-36754 | High | 7.2 | 2022-09-02 | Expense Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /Home/debit_credit_p. |
CVE-2021-41434 | Medium | 5.4 | 2022-09-28 | A stored Cross-Site Scripting (XSS) vulnerability exists in version 1.0 of the Expense Management System application that allows for arbitrary execution of Jav… |
CVE-2024-1031 | Low | 3.5 | 2024-01-30 | A vulnerability was found in CodeAstro Expense Management System 1.0. It has been declared as problematic. This vulnerability affects unknown code of the file… |