CVE-2022-2688 — SourceCodester Expense Management System POST Parameter report.php fetch_report_credit sql injection

CVE-2022-2688

SourceCodester Expense Management System POST Parameter report.php fetch_report_credit sql injection PUBLISHED

Description (CNA)

A vulnerability was found in SourceCodester Expense Management System. It has been rated as critical. This issue affects the function fetch_report_credit of the file report.php of the component POST Parameter Handler. The manipulation of the argument from/to leads to sql injection. The attack may be initiated remotely. The associated identifier of this vulnerability is VDB-205811.

Affected (CNA)

Vendor / product	Versions
SourceCodester / Expense Management System	affected n/a

CWE

CWE-89

References

https://vuldb.com/?id.205811

ADP enrichment

CVE

No English description supplied.

https://vuldb.com/?id.205811

CISA-ADP

No English description supplied.

No references supplied.