Moneymanagerex vulnerabilities
We track 2 vulnerabilities in Moneymanagerex products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on October 24, 2024.
2vulnerabilities
2critical
0high
0exploited
9.8average CVSS score
Latest Moneymanagerex vulnerabilities
- 9.8 Critical severity
money_manager_ex_webapp: Improper Neutralization of Special Elements used in an SQL Command
Money Manager EX WebApp (web-money-manager-ex) 1.2.2 is vulnerable to SQL Injection in the `transaction_delete_group` function. The vulnerability is due to improper sanitization of user input in the `TrDeleteArr` parameter, which is directly incorporated into
- 9.8 Critical severity
money_manager_ex_webapp: Incorrect Authorization
Money Manager EX WebApp (web-money-manager-ex) 1.2.2 is vulnerable to Incorrect Access Control. The `redirect_if_not_loggedin` function in `functions_security.php` fails to terminate script execution after redirecting unauthenticated users. This flaw allows an