AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2022-2688

MEDIUM · CVSS 6.3 EPSS 0.53%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2022-08-06 · Last synced 2026-08-04

CyberRota Analysis

This is a medium severity vulnerability with a CVSS score of 6.3. It may be remotely exploitable. It involves a SQL injection risk.

CVE
CVE-2022-2688
Severity
MEDIUM
CVSS
6.3
EPSS
0.53%

Original NVD Description

A vulnerability was found in SourceCodester Expense Management System. It has been rated as critical. This issue affects the function fetch_report_credit of the file report.php of the component POST Parameter Handler. The manipulation of the argument from/to leads to sql injection. The attack may be initiated remotely. The associated identifier of this vulnerability is VDB-205811.