A vulnerability was detected in PHPGurukul Daily Expense Tracker System 1.1. This vulnerability affects unknown code of the file /dets/index.php of the component Login. Performing a manipulation of the argument email results in sql injection. Remote exploitation of the attack is possible. The exploit is now public and may be used.

A SQL injection vulnerability has been identified in PHPGurukul Daily Expense Tracker System version 1.1. The vulnerability exists in the file /dets/index.php within the Login component. An attacker can manipulate the email argument to perform SQL injection attacks. The vulnerability is remotely exploitable, meaning no local access is required. A public exploit is already available, increasing the risk of active exploitation. This type of vulnerability can allow attackers to bypass authentication, extract sensitive data, or manipulate the underlying database. The affected product is a PHP-based expense tracking web application. Users of this system are advised to apply patches or mitigations immediately given the public exploit availability.