57 matches found
CVE-2024-10335 SourceCodester Garbage Collection Management System login.php sql injection
A vulnerability was found in SourceCodester Garbage Collection Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file login.php. The manipulation of the argument username/password leads to sql injection. The attack can be initiated remotely. T...
CVE-2024-10335
CVE-2024-10335 affects SourceCodester Garbage Collection Management System 1.0. The vulnerability resides in the login.php code, where manipulation of the username and potentially password parameters leads to an SQL injection. Exploitation is described as remote, with public disclosure of the exp...
CVE-2024-6439
A vulnerability was found in SourceCodester Home Owners Collection Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /classes/Users.php?f=save. The manipulation of the argument img leads to unrestricted upload. The attack may be initiated...
CVE-2024-6439 SourceCodester Home Owners Collection Management System unrestricted upload
A vulnerability was found in SourceCodester Home Owners Collection Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /classes/Users.php?f=save. The manipulation of the argument img leads to unrestricted upload. The attack may be initiated...
Home Owners Collection Management System SQL Injection Vulnerability (CNVD-2022-70597)
A SQL injection vulnerability exists in Home Owners Collection Management System v1.0, which originates in /hocms/classes/Master.php The vulnerability is caused by a lack of filtering and escaping of SQL data in ?f=deletephase. An attacker could exploit this vulnerability to cause SQL injection...
Home Owners Collection Management System SQL注入漏洞(CNVD-2022-43865)
Home Owners Collection Management System is a homeowner collection management system. Home Owners Collection Management System is vulnerable to SQL injection, which can be exploited by attackers to execute illegal SQL commands to steal sensitive database data...
Sql injection
Home Owners Collection Management System v1.0 was discovered to contain a SQL injection vulnerability via /hocms/classes/Master.php?f=deletephase...
Sql injection
Home Owners Collection Management System v1.0 was discovered to contain a SQL injection vulnerability via /hocms/classes/Master.php?f=deletecollection...
Sql injection
Home Owners Collection Management System v1.0 was discovered to contain a SQL injection vulnerability via /hocms/classes/Master.php?f=deletephase...
Sql injection
Home Owners Collection Management System v1.0 was discovered to contain a SQL injection vulnerability via /hocms/classes/Master.php?f=deletemember...
CVE-2022-28414
Home Owners Collection Management System v1.0 was discovered to contain a SQL injection vulnerability via /hocms/classes/Master.php?f=deletemember...
CVE-2022-28414
CVE-2022-28414 affects Home Owners Collection Management System v1.0, with a SQL injection vulnerability in /hocms/classes/Master.php?f=delete_member. Root cause: improper input handling enabling SQL injection. Impact: potential disclosure/alteration of database data; per NVD, CVSSv3.1 base score...
CVE-2022-28416
Home Owners Collection Management System v1.0 was discovered to contain a SQL injection vulnerability via /hocms/classes/Master.php?f=deletephase...
CVE-2022-28415
Home Owners Collection Management System v1.0 was discovered to contain a SQL injection vulnerability via /hocms/classes/Master.php?f=deletecollection...
CVE-2022-28415
CVE-2022-28415 corresponds to a SQL injection vulnerability in Home Owners Collection Management System v1.0, exploitable via /hocms/classes/Master.php?f=delete_collection. The connected records confirm the affected product and the vulnerable component (Master.php) but do not provide patch versio...
CVE-2022-28416
CVE-2022-28416 affects Home Owners Collection Management System v1.0. The vulnerability is a SQL injection in the delete_phase path exposed via /hocms/classes/Master.php?f=delete_phase, allowing an attacker to manipulate queries and potentially access or modify database data. The surrounding docu...
CVE-2022-28417
CVE-2022-28417 affects Home Owners Collection Management System v1.0, with a SQL injection in /hocms/classes/Master.php?f=delete_phase. The vulnerability is caused by lack of input filtering/escaping, enabling potentially unauthorized data access/modification via network without authentication. C...
Home Owners Collection Management System SQL注入漏洞
Home Owners Collection Management System is a homeowner collection management system. Home Owners Collection Management System is vulnerable to SQL injection, which can be exploited by attackers to execute illegal SQL commands to steal sensitive database data...
Home Owners Collection Management System Remote Code Execution Vulnerability (CNVD-2022-19486)
A remote code execution vulnerability exists in Home Owners Collection Management System, a homeowner collection management system, which can be exploited by attackers to execute arbitrary code via a crafted PNG file...
Home Owners Collection Management System信任管理问题漏洞
Home Owners Collection Management System, a homeowner collection management system, is vulnerable to a trust management issue stemming from Home Owners Collection Management System v1.0. System v1.0 was found to contain hard-coded credentials, which could be exploited by an attacker to escalate...