money_manager_ex_webapp vulnerabilities

2 known vulnerabilities in money_manager_ex_webapp from Moneymanagerex. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  money_manager_ex_webapp: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2024-41618Oct 24, 2024Moneymanagerex

  Money Manager EX WebApp (web-money-manager-ex) 1.2.2 is vulnerable to SQL Injection in the `transaction_delete_group` function. The vulnerability is due to improper sanitization of user input in the `TrDeleteArr` parameter, which is directly incorporated into

• 9.8 Critical severity

  money_manager_ex_webapp: Incorrect Authorization

  CVE-2024-41617Oct 24, 2024MoneymanagerexEPSS 1.13%

  Money Manager EX WebApp (web-money-manager-ex) 1.2.2 is vulnerable to Incorrect Access Control. The `redirect_if_not_loggedin` function in `functions_security.php` fails to terminate script execution after redirecting unauthenticated users. This flaw allows an