CVE-2021-44098: Egavilanmedia Expense Management System

Critical severity, CVSS 9.8. EPSS: 1.5% chance of exploitation in the next 30 days.

EGavilan Media Expense-Management-System 1.0 is vulnerable to SQL Injection via /expense_action.php. This allows a remote attacker to compromise Application SQL database.

Affected products

• Egavilanmedia Expense Management System: version 1.0 only

Published 2022-06-02. Last modified 2026-06-17.