ORETNOM23 Budget And Expense Tracker System vulnerabilities

4 CVEs affecting ORETNOM23 Budget And Expense Tracker System, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2024-22628, published 2024-01-16.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2021-41645, published 2021-10-29. High severity, CVSS 8.8. EPSS: 3.2% chance of exploitation in the next 30 days. Remote Code Execution (RCE) vulnerability exists in Sourcecodester Budget and Expense Tracker System 1.0 that allows a remote malicious user to inject arbitrary code via the image upload field. .
CVE-2021-40247, published 2022-01-21. Critical severity, CVSS 9.8. EPSS: 2.6% chance of exploitation in the next 30 days. SQL injection vulnerability in Sourcecodester Budget and Expense Tracker System v1 by oretnom23, allows attackers to execute arbitrary SQL commands via the username field.
CVE-2023-2772, published 2023-05-17. High severity, CVSS 8.8. EPSS: 0.7% chance of exploitation in the next 30 days. A vulnerability, which was classified as critical, was found in SourceCodester Budget and Expense Tracker System 1.0. Affected is an unknown function of the file /admin/budget/manage_budget.php of…
CVE-2024-22628, published 2024-01-16. High severity, CVSS 7.2. EPSS: 0.6% chance of exploitation in the next 30 days. Budget and Expense Tracker System v1.0 is vulnerable to SQL Injection via /expense_budget/admin/?page=reports/budget&date_start=2023-12-28&date_end=