Medium severity6.3NVD Advisory· Published Aug 6, 2022· Updated Jun 17, 2026
CVE-2022-2688
CVE-2022-2688
Description
A vulnerability was found in SourceCodester Expense Management System. It has been rated as critical. This issue affects the function fetch_report_credit of the file report.php of the component POST Parameter Handler. The manipulation of the argument from/to leads to sql injection. The attack may be initiated remotely. The associated identifier of this vulnerability is VDB-205811.
Affected products
3- Range: n/a
- cpe:2.3:a:expense_management_system_project:expense_management_system:-:*:*:*:*:*:*:*
Patches
Vulnerability mechanics
References
1- vuldb.comnvdThird Party Advisory
News mentions
0No linked articles in our index yet.