CVE:CVE-2022-36754
CNNVD:CNNVD-202209-134
Expense Management System是Carlo Montero个人开发者的一个费用管理系统。
Expense Management System v1.0版本存在安全漏洞，该漏洞源于其/Home/debit_credit_p组件中的id参数存在SQL注入。
solution:Upgrade expense_management_system_project expense_management_system to a higher version than 1.0,and avoid the version 1.0