Threat database

2 threats

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Critical	9.8	EPSS 0.5%	CVE-2024-41618web-money-manager-ex · SQL Injection Critical9.8EPSS 0.5%2024-10-24CVE Database V5CVE-2024-41618 Money Manager EX WebApp (web-money-manager-ex) 1.2.2 is vulnerable to SQL Injection in the `transaction_delete_group` function. The vulnerability is due to improper sanitization of user input in the `TrDeleteArr` parameter, which is directly incorporated into an SQL query. EPSS 0.5%Vulnerability CWE-89	CVE Database V5	2024-10-24
Critical	9.8	EPSS 1.1%	CVE-2024-41617web-money-manager-ex · Incorrect Authorization Critical9.8EPSS 1.1%2024-10-24CVE Database V5CVE-2024-41617 Money Manager EX WebApp (web-money-manager-ex) 1.2.2 is vulnerable to Incorrect Access Control. The `redirect_if_not_loggedin` function in `functions_security.php` fails to terminate script execution after redirecting unauthenticated users. This flaw allows an unauthenticated attacker to upload arbitrary files, potentially leading to Remote Code Execution. EPSS 1.1%Vulnerability CWE-863	CVE Database V5	2024-10-24

Page 1 of 1