CVE-2022-25028

CVE-2022-25028: A cross-site scripting (XSS) vulnerability affects Home Owners Collection Management System v1.0, exploitable via the collected_by parameter in the List of Collections module. Root cause is insufficient input/output filtering for that parameter, enabling injection of JavaScript. T...

Home Owners Collection Management System 跨站脚本漏洞

Home Owners Collection Management System is a homeowner collection management system. v1.0 of Home Owners Collection Management System is vulnerable to a cross-site scripting vulnerability that originates from a lack of filtering of user-supplied data and output data via the collect by parameter...

CVE-2022-25028: Improper Neutralization of Input During Web Page Generation

Home Owners Collection Management System v1.0 was discovered to contain a cross-site scripting XSS vulnerability via the collectedby parameter under the List of Collections module...

CVE-2022-25095

Home Owners Collection Management System v1.0 allows unauthenticated attackers to compromise user accounts via a crafted POST request...

CVE-2022-25096

Home Owners Collection Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter in /members/viewmember.php...

CVE-2022-25094

Home Owners Collection Management System v1.0 was discovered to contain a remote code execution RCE vulnerability via the parameter "cover" in SystemSettings.php...

CVE-2022-25095

Home Owners Collection Management System v1.0 allows unauthenticated attackers to compromise user accounts via a crafted POST request...

Sql injection

Home Owners Collection Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter in /members/viewmember.php...

CVE-2022-25096

Home Owners Collection Management System v1.0 contains a SQL injection vulnerability via the id parameter in /members/view_member.php. Exploitation details in related sources indicate potential for elevated/admin access and data exfiltration; time-based payloads are described in a 0day/exploit en...

CVE-2022-25095

CVE-2022-25095 affects Home Owners Collection Management System v1.0. A crafted unauthenticated POST request allows an attacker to compromise user accounts, indicating a failure of authentication/authorization controls. The vulnerability’s impact is described as allowing account compromise with p...

CVE-2022-25094

CVE-2022-25094 affects Home Owners Collection Management System v1.0. The vulnerability is a remote code execution (RCE) caused by handling of the cover parameter in SystemSettings.php, allowing an attacker to execute code on the vulnerable system. Multiple connected advisories and vendors corrob...

Home Owners Collection Management System 安全漏洞

A security vulnerability exists in the Home Owners Collection Management System, a homeowner collection management system, which can be exploited by attackers to compromise user accounts via a crafted POST request...

CVE-2022-25094: Undefined Security Weakness

Home Owners Collection Management System v1.0 was discovered to contain a remote code execution RCE vulnerability via the parameter "cover" in SystemSettings.php...

CVE-2022-25095: Undefined Security Weakness

Home Owners Collection Management System v1.0 allows unauthenticated attackers to compromise user accounts via a crafted POST request...

CVE-2022-25096: Improper Neutralization of Special Elements used in an SQL Command

Home Owners Collection Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter in /members/viewmember.php...

Home Owners Collection Management System 1.0 Account Takeover

Exploit Title: Home Owners Collection Management System 1.0 - Account Takeover Unauthenticated Date: 9/02/2022 Exploit Author: Saud Alenazi Vendor Homepage: https://www.sourcecodester.com/ Software Link:...

Home Owners Collection Management System 1.0 - Account Takeover Vulnerability

Exploit Title: Home Owners Collection Management System 1.0 - Account Takeover Unauthenticated Exploit Author: Saud Alenazi Vendor Homepage: https://www.sourcecodester.com/ Software Link: https://www.sourcecodester.com/php/15162/home-owners-collection-management-system-phpoop-free-source-code.htm...

CVE-2020-35970

An issue was discovered in YzmCMS 5.8. There is a SSRF vulnerability in the background collection management that allows arbitrary file read...

CVE-2020-35970

An issue was discovered in YzmCMS 5.8. There is a SSRF vulnerability in the background collection management that allows arbitrary file read...

Server side request forgery (ssrf)

An issue was discovered in YzmCMS 5.8. There is a SSRF vulnerability in the background collection management that allows arbitrary file read...