Security Advisory

CVE-2024-41618

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2024-10-24 00:00:00

Last updated 2024-10-29 17:06:06

Assigner mitre

State PUBLISHED

Description

Money Manager EX WebApp (web-money-manager-ex) 1.2.2 is vulnerable to SQL Injection in the `transaction_delete_group` function. The vulnerability is due to improper sanitization of user input in the `TrDeleteArr` parameter, which is directly incorporated into an SQL query.

← Browse all CVEs View on cve.org ↗