Vulnerabilities > CVE-2022-2688 - Unspecified vulnerability in Expense Management System Project Expense Management System
Attack vector
NETWORK Attack complexity
LOW Privileges required
NONE Confidentiality impact
HIGH Integrity impact
HIGH Availability impact
HIGH Summary
A vulnerability was found in SourceCodester Expense Management System. It has been rated as critical. This issue affects the function fetch_report_credit of the file report.php of the component POST Parameter Handler. The manipulation of the argument from/to leads to sql injection. The attack may be initiated remotely. The associated identifier of this vulnerability is VDB-205811.
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Application | 1 |