CVE-2022-2688

A vulnerability was found in SourceCodester Expense Management System. It has been rated as critical. This issue affects the function fetch_report_credit of the file report.php of the component POST Parameter Handler. The manipulation of the argument from/to leads to sql injection. The attack may be initiated remotely. The associated identifier of this vulnerability is VDB-205811.

• CWE-89

• https://vuldb.com/?id.205811Third Party Advisory
• https://vuldb.com/?id.205811Third Party Advisory

Published

Aug 6, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-26871An arbitrary file upload vulnerability in Trend Micro Apex C…9.8
• CVE-2022-26872AMI Megarac Password reset interception via API8.8
• CVE-2022-26873A potential attacker can execute an arbitrary code at the ti…8.2
• CVE-2022-26874lib/Horde/Mime/Viewer/Ooo.php in Horde Mime_Viewer before 2.…5.4
• CVE-2022-26877Asana Desktop before 1.6.0 allows remote attackers to exfilt…6.5
• CVE-2022-26878drivers/bluetooth/virtio_bt.c in the Linux kernel before 5.1…5.5
• CVE-2022-26884Users can read any files by log server, Apache DolphinSchedu…6.5
• CVE-2022-26885When using tasks to read config files, there is a risk of da…7.5
• CVE-2022-26887Delta Electronics DIAEnergie (All versions prior to 1.8.02.0…9.8
• CVE-2022-26888Cross-site scripting in the Intel(R) Quartus Prime Pro and S…4.1
• CVE-2022-26889In Splunk Enterprise versions before 8.1.2, the uri path to …8.8
• CVE-2022-2689A vulnerability classified as problematic has been found in …5.4