CVE-2025-40732

CWE-2033 documents3 sources

Severity

8.7HIGH

EPSS

0.1%

top 76.80%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Daily Expense Manager Daily Expense Manager Code-projects Daily Expense Manager

Timeline

PublishedJun 30

Description

user enumeration vulnerability in Daily Expense Manager v1.0. To exploit this vulnerability a POST request must be sent using the name parameter in /check.php

CVSS vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N

Affected Packages2 packages

▶NVDcode-projects/daily_expense_manager1.0

▶CVEListV5daily_expense_manager/daily_expense_manager1.0

🔴Vulnerability Details

GHSA

GHSA-76wp-r6xr-9rx6: user enumeration vulnerability in Daily Expense Manager v1↗2025-06-30

▶

CVEList

User enumeration vulnerability in Daily Expense Manager↗2025-06-30

▶