CVE-2025-5368

Name of the Vulnerable Software and Affected Versions PHPGurukul Daily Expense Tracker System version 1.1

Description A critical issue affects the PHPGurukul Daily Expense Tracker System, specifically in the unknown processing of the file /expense-yearwise-reports-detailed.php. The manipulation of the todate argument leads to SQL injection. This issue can be exploited remotely.

Recommendations For PHPGurukul Daily Expense Tracker System version 1.1, consider restricting access to the /expense-yearwise-reports-detailed.php file until a patch is available. As a temporary workaround, avoid using the todate argument in the affected file to minimize the risk of exploitation.