Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 2

Export CSV
CVE-2021-44098

EGavilan Media Expense-Management-System 1.0 is vulnerable to SQL Injection via /expense_action.php. This allows a remote attacker to compromise Application SQL database.

CVSS 3.1 · 9.8 Critical EPSS 1.5% KEV · Not listed
Vendors
Egavilanmedia
Products
Expense Management System
CVE-2020-35395

XSS in the Add Expense Component of EGavilan Media Expense Management System 1.0 allows an attacker to permanently store malicious JavaScript code via the 'description' field

CVSS 3.1 · 6.1 Medium EPSS < 1% KEV · Not listed
Vendors
Egavilanmedia
Products
Expense Management System