Vulnerabilities > Oretnom23 > Expense Management System > 1.0
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2024-01-30 | CVE-2024-1031 | Cross-site Scripting vulnerability in Oretnom23 Expense Management System 1.0 A vulnerability was found in CodeAstro Expense Management System 1.0. | 6.1 |
| 2023-10-17 | CVE-2023-44824 | Unrestricted Upload of File with Dangerous Type vulnerability in Oretnom23 Expense Management System 1.0 An issue in Expense Management System v.1.0 allows a local attacker to execute arbitrary code via a crafted file uploaded to the sign-up.php component. | 7.8 |
| 2022-09-28 | CVE-2021-41434 | Cross-site Scripting vulnerability in Oretnom23 Expense Management System 1.0 A stored Cross-Site Scripting (XSS) vulnerability exists in version 1.0 of the Expense Management System application that allows for arbitrary execution of JavaScript commands through index.php. | 5.4 |
| 2022-09-02 | CVE-2022-36754 | SQL Injection vulnerability in Oretnom23 Expense Management System 1.0 Expense Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /Home/debit_credit_p. | 7.2 |