CVE-2025-5546: PHPGurukul Daily Expense Tracker System expense-reports-detailed.php sql injection

Published Jun 3, 2025

Updated

A vulnerability classified as critical was found in PHPGurukul Daily Expense Tracker System 1.1. This vulnerability affects unknown code of the file /expense-reports-detailed.php. The manipulation of the argument fromdate/todate leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.

Affected Software

2 affected components

Phpgurukul Daily Expense Tracker System

Phpgurukul Daily Expense Tracker System=1.1

Event History

Jun 3, 2025

CVE Published

via MITRE·11:31 PM

Data Sourced

via MITRE·11:31 PM

DescriptionSeverityWeakness

Jun 4, 2025

Data Sourced

via NVD·12:15 AM

DescriptionSeverityWeakness

Frequently Asked Questions

What is the severity of CVE-2025-5546?

CVE-2025-5546 is classified as a critical vulnerability.

What type of vulnerability is CVE-2025-5546?

CVE-2025-5546 is an SQL injection vulnerability affecting PHPGurukul Daily Expense Tracker System.

How can an attacker exploit CVE-2025-5546?

An attacker can exploit CVE-2025-5546 by manipulating the fromdate or todate parameters in the vulnerable file /expense-reports-detailed.php.

Which software is affected by CVE-2025-5546?

CVE-2025-5546 affects the PHPGurukul Daily Expense Tracker System version 1.1.

How do I fix CVE-2025-5546?

To fix CVE-2025-5546, validate and sanitize user inputs for the fromdate and todate parameters to prevent SQL injection.