{"id":"CVE-2023-1858","aliases":["EUVD-2023-24060","GHSA-3rvc-764q-q5rq"],"status":"published","title":"SourceCodester Earnings and Expense Tracker App index.php information disclosure","description":"A vulnerability was found in SourceCodester Earnings and Expense Tracker App 1.0. It has been classified as problematic. This affects an unknown part of the file index.php. The manipulation of the argument page leads to information disclosure. It is possible to initiate the attack remotely. The identifier VDB-224997 was assigned to this vulnerability.","severity":{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-10","score":0.00583,"percentile":0.48224,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-200"],"published":"2023-04-05T08:00:08Z","modified":"2026-06-17T05:28:54Z","products":[{"vendor":"earnings_and_expense_tracker_app_project","product":"earnings_and_expense_tracker_app"},{"vendor":"sourcecodester","product":"earnings and expense tracker app"}],"references":[{"url":"https://vuldb.com/?id.224997","tags":["vdb-entry","technical-description","x_transferred","Permissions Required","Third Party Advisory","VDB Entry"]},{"url":"https://vuldb.com/?ctiid.224997","tags":["signature","x_transferred","Permissions Required","Third Party Advisory","VDB Entry"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-1858"},{"url":"https://github.com/advisories/GHSA-3rvc-764q-q5rq"}],"sources":{"cve":[{"id":"CVE-2023-1858","title":"SourceCodester Earnings and Expense Tracker App index.php information disclosure","description":"A vulnerability was found in SourceCodester Earnings and Expense Tracker App 1.0. It has been classified as problematic. This affects an unknown part of the file index.php. The manipulation of the argument page leads to information disclosure. It is possible to initiate the attack remotely. The identifier VDB-224997 was assigned to this vulnerability.","status":"published","published":"2023-04-05T08:00:08.756Z","modified":"2024-08-02T06:05:26.698Z","cvss":[{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","level":"medium","assessor":"cna"},{"version":"3.0","score":4.3,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","level":"medium","assessor":"cna"},{"version":"2.0","score":4,"vector":"AV:N/AC:L/Au:S/C:P/I:N/A:N","assessor":"cna"}],"cwes":["CWE-200"],"updated_at":"2026-11-02T14:35:32.019713Z"}],"euvd":[{"id":"EUVD-2023-24060","description":"A vulnerability was found in SourceCodester Earnings and Expense Tracker App 1.0. It has been classified as problematic. This affects an unknown part of the file index.php. The manipulation of the argument page leads to information disclosure. It is possible to initiate the attack remotely. The identifier VDB-224997 was assigned to this vulnerability.","status":"published","published":"2023-04-05T08:00:08Z","modified":"2024-08-02T06:05:26Z","cvss":[{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","level":"medium"}],"updated_at":"2026-11-03T03:50:15.01159Z"}],"ghsa":[{"id":"GHSA-3rvc-764q-q5rq","title":"A vulnerability was found in SourceCodester Earnings and Expense Tracker App 1.0. It has been...","description":"A vulnerability was found in SourceCodester Earnings and Expense Tracker App 1.0. It has been classified as problematic. This affects an unknown part of the file index.php. The manipulation of the argument page leads to information disclosure. It is possible to initiate the attack remotely. The identifier VDB-224997 was assigned to this vulnerability.","status":"published","published":"2023-04-05T09:30:17Z","modified":"2023-04-19T05:09:02Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high"}],"cwes":["CWE-200"],"updated_at":"2026-11-02T14:54:31.754243Z"}],"nvd":[{"id":"CVE-2023-1858","description":"A vulnerability was found in SourceCodester Earnings and Expense Tracker App 1.0. It has been classified as problematic. This affects an unknown part of the file index.php. The manipulation of the argument page leads to information disclosure. It is possible to initiate the attack remotely. The identifier VDB-224997 was assigned to this vulnerability.","status":"published","published":"2023-04-05T09:15:08.597Z","modified":"2026-06-17T05:28:54.423Z","cvss":[{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","level":"medium","assessor":"secondary"},{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high","assessor":"primary"},{"version":"2.0","score":4,"vector":"AV:N/AC:L/Au:S/C:P/I:N/A:N","level":"medium","assessor":"secondary"}],"cwes":["CWE-200"],"updated_at":"2026-11-02T14:07:53.719171Z"}]}}