Approved changes feed: RSS · Atom

cpe:2.3:a:sourcecodester:expense_management_system:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorSourcecodester (f6c988b2-f9bb-51b9-8f02-f23eef2a7551)
ProductExpense Management System (daf695a4-7868-57c6-a006-4909d667af03)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2022-2688 vulnerable 2026-06-08 05:43:36.031236 SourceCodester Expense Management System POST Parameter report.php fetch_report_credit sql injection
MEDIUM (6.3)
A vulnerability was found in SourceCodester Expense Management System. It has been rated as critical. This issue affects the function fetch_report_credit of the file report.php of the component POST Parameter Handler. The manipulation of the argument from/to leads to sql injection. The attack may be initiated remotely. The associated identifier of this vulnerability is VDB-205811.
Published: 2022-08-06T17:20:20.000Z
Updated: 2025-04-15T13:58:19.746Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.