Filtered by vendor Egavilanmedia Subscriptions
Filtered by product Expense Management System Subscriptions
Total 2 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2021-44098 1 Egavilanmedia 1 Expense Management System 2024-11-21 9.8 Critical
EGavilan Media Expense-Management-System 1.0 is vulnerable to SQL Injection via /expense_action.php. This allows a remote attacker to compromise Application SQL database.
CVE-2020-35395 1 Egavilanmedia 1 Expense Management System 2024-11-21 6.1 Medium
XSS in the Add Expense Component of EGavilan Media Expense Management System 1.0 allows an attacker to permanently store malicious JavaScript code via the 'description' field