CVE-2022-36754

Impact

Expense Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /Home/debit_credit_p.

Affected products

Weakness classification

References

• NVD record
• CVE.org record
• https://github.com/mikeccltt/0724/blob/main/ci_ems/sql.md
• https://github.com/mikeccltt/0724/blob/main/ci_ems/sql.md