Skip to content
CVE PROGRAM SOURCE RECORD6.3 Medium

CVE-2022-2688

SourceCodester Expense Management System POST Parameter report.php fetch_report_credit sql injection

Description

A vulnerability was found in SourceCodester Expense Management System. It has been rated as critical. This issue affects the function fetch_report_credit of the file report.php of the component POST Parameter Handler. The manipulation of the argument from/to leads to sql injection. The attack may be initiated remotely. The associated identifier of this vulnerability is VDB-205811.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

SourceCodester Expense Management System

  • n/aaffected

References