<?xml version="1.0" encoding="UTF-8"?><?xml-stylesheet type="text/xsl" href="../assets/feed.xsl"?><rss version="2.0"><channel><title>PatchTheCVE: earnings and expense tracker app project</title><link>https://patchthecve.com/</link><description>CVEs with upgrade or downgrade fix steps</description><item><title>CVE-2023-1858: A vulnerability was found in SourceCodester Earnings and Expense Tracker App 1.0</title><link>https://patchthecve.com/cve/CVE-2023-1858.html</link><guid>https://patchthecve.com/cve/CVE-2023-1858.html</guid><pubDate>Wed, 17 Jun 2026 05:28:54 +0000</pubDate><description>MEDIUM 4.3: A vulnerability was found in SourceCodester Earnings and Expense Tracker App 1.0. It has been classified as problematic. This affects an unknown part of the file index.php. The manipulation of the argument page leads to information disclosure. It is possible to initiate the attack remotely. The iden</description></item><item><title>CVE-2023-1785: A vulnerability was found in SourceCodester Earnings and Expense Tracker App 1.0</title><link>https://patchthecve.com/cve/CVE-2023-1785.html</link><guid>https://patchthecve.com/cve/CVE-2023-1785.html</guid><pubDate>Wed, 17 Jun 2026 05:28:45 +0000</pubDate><description>MEDIUM 6.3: A vulnerability was found in SourceCodester Earnings and Expense Tracker App 1.0. It has been classified as critical. Affected is an unknown function of the file manage_user.php. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. The identifier </description></item><item><title>CVE-2023-1690: A vulnerability, which was classified as problematic, has been found in SourceCodester Earnings and Expense Tr</title><link>https://patchthecve.com/cve/CVE-2023-1690.html</link><guid>https://patchthecve.com/cve/CVE-2023-1690.html</guid><pubDate>Wed, 17 Jun 2026 05:28:32 +0000</pubDate><description>LOW 3.5: A vulnerability, which was classified as problematic, has been found in SourceCodester Earnings and Expense Tracker App 1.0. This issue affects some unknown processing of the file LoginRegistration.php?a=register_user. The manipulation of the argument fullname leads to cross site scripting. The atta</description></item><item><title>CVE-2023-1689: A vulnerability classified as problematic was found in SourceCodester Earnings and Expense Tracker App 1.0</title><link>https://patchthecve.com/cve/CVE-2023-1689.html</link><guid>https://patchthecve.com/cve/CVE-2023-1689.html</guid><pubDate>Wed, 17 Jun 2026 05:28:31 +0000</pubDate><description>LOW 3.5: A vulnerability classified as problematic was found in SourceCodester Earnings and Expense Tracker App 1.0. This vulnerability affects unknown code of the file Master.php?a=save_earning. The manipulation of the argument name leads to cross site scripting. The attack can be initiated remotely. The id</description></item></channel></rss>