CVE-2022-28077

CVE-2022-28077 affects Home Owners Collection Management v1. The vulnerability is a reflected XSS in the Admin panel via the $_GET['s'] parameter, caused by lack of input validation/filtering and output of unsanitized data. Impact described as client-side JavaScript execution in affected sessions...

Exploit for Cross-site Scripting in Home_Owners_Collection_Management_System_Project Home_Owners_Collection_Management_System

CVE-2022-28077 Home Owners Collection Management System 1.0 -...

CVE-2022-28078: Improper Neutralization of Input During Web Page Generation

Home Owners Collection Management v1 was discovered to contain a reflected cross-site scripting XSS vulnerability in the Admin panel via the $GET'page' parameter...

Home Owners Collection Management 跨站脚本漏洞

Fairway Independent Mortgage Home Owners Collection Management is a home purchase loan system from Fairway Independent Mortgage. home owners collection management v1 version contains a cross-site scripting vulnerability, which stems from a lack of data validation filtering of user-supplied data a...

CVE-2022-28077: Improper Neutralization of Input During Web Page Generation

Home Owners Collection Management v1 was discovered to contain a reflected cross-site scripting XSS vulnerability in the Admin panel via the $GET's' parameter...

Home Owners Collection Management System SQL Injection Vulnerability (CNVD-2022-70597)

A SQL injection vulnerability exists in Home Owners Collection Management System v1.0, which originates in /hocms/classes/Master.php The vulnerability is caused by a lack of filtering and escaping of SQL data in ?f=deletephase. An attacker could exploit this vulnerability to cause SQL injection...

Home Owners Collection Management System SQL注入漏洞（CNVD-2022-43864）

Home Owners Collection Management System is a homeowner collection management system. Home Owners Collection Management System is vulnerable to SQL injection, which can be exploited by attackers to execute illegal SQL commands to steal sensitive database data...

Home Owners Collection Management System SQL注入漏洞（CNVD-2022-43865）

Home Owners Collection Management System is a homeowner collection management system. Home Owners Collection Management System is vulnerable to SQL injection, which can be exploited by attackers to execute illegal SQL commands to steal sensitive database data...

Home Owners Collection Management System SQL注入漏洞（CNVD-2022-43866）

Home Owners Collection Management System is a homeowner collection management system. Home Owners Collection Management System is vulnerable to SQL injection, which can be exploited by attackers to execute illegal SQL commands to steal sensitive database data...

CVE-2022-28416

Home Owners Collection Management System v1.0 was discovered to contain a SQL injection vulnerability via /hocms/classes/Master.php?f=deletephase...

CVE-2022-28415

Home Owners Collection Management System v1.0 was discovered to contain a SQL injection vulnerability via /hocms/classes/Master.php?f=deletecollection...

Sql injection

Home Owners Collection Management System v1.0 was discovered to contain a SQL injection vulnerability via /hocms/classes/Master.php?f=deletecollection...

Sql injection

Home Owners Collection Management System v1.0 was discovered to contain a SQL injection vulnerability via /hocms/classes/Master.php?f=deletemember...

Sql injection

Home Owners Collection Management System v1.0 was discovered to contain a SQL injection vulnerability via /hocms/classes/Master.php?f=deletephase...

Sql injection

Home Owners Collection Management System v1.0 was discovered to contain a SQL injection vulnerability via /hocms/classes/Master.php?f=deletephase...

CVE-2022-28414

Home Owners Collection Management System v1.0 was discovered to contain a SQL injection vulnerability via /hocms/classes/Master.php?f=deletemember...

CVE-2022-28414

CVE-2022-28414 affects Home Owners Collection Management System v1.0, with a SQL injection vulnerability in /hocms/classes/Master.php?f=delete_member. Root cause: improper input handling enabling SQL injection. Impact: potential disclosure/alteration of database data; per NVD, CVSSv3.1 base score...

CVE-2022-28416

Home Owners Collection Management System v1.0 was discovered to contain a SQL injection vulnerability via /hocms/classes/Master.php?f=deletephase...

CVE-2022-28416

CVE-2022-28416 affects Home Owners Collection Management System v1.0. The vulnerability is a SQL injection in the delete_phase path exposed via /hocms/classes/Master.php?f=delete_phase, allowing an attacker to manipulate queries and potentially access or modify database data. The surrounding docu...

CVE-2022-28415

Home Owners Collection Management System v1.0 was discovered to contain a SQL injection vulnerability via /hocms/classes/Master.php?f=deletecollection...