CVE-2025-40731 — SQL injection vulnerability in Daily Expense Manager

CVE-2025-40731

SQL injection vulnerability in Daily Expense Manager PUBLISHED

Description (CNA)

SQL injection vulnerability in Daily Expense Manager v1.0. This vulnerability allows an attacker to retrieve, create, update and delete databases through the pname, pprice and id parameters in /update.php.

Affected (CNA)

Vendor / product	Versions
Daily Expense Manager / Daily Expense Manager	affected 1.0

CWE

CWE-89

References

https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-daily-expense-manager

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.