CVE-2025-40731

8.7 highEPSS 0.3%

High (8.7) in code-projects daily expense manager. EPSS 0.3% chance of exploitation in the next 30 days.

SQL injection vulnerability in Daily Expense Manager v1.0. This vulnerability allows an attacker to retrieve, create, update and delete databases through the pname, pprice and id parameters in /update.php.

Severity

CVSS 4.0

8.7 high

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

CVSS 3.1

9.8 critical

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 0.3% chance of exploitation in the next 30 days; higher than 28% of CVEs (scores of 2026-10-31)
CWE: CWE-89
Published: 2025-06-30
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

code-projects:daily_expense_manager

References

https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-daily-expense-manager

Check your stack JSON