CVE-2022-28415

Home Owners Collection Management System v1.0 was discovered to contain a SQL injection vulnerability via /hocms/classes/Master.php?f=deletecollection...

CVE-2022-28416

Home Owners Collection Management System v1.0 was discovered to contain a SQL injection vulnerability via /hocms/classes/Master.php?f=deletephase...

Sql injection

Home Owners Collection Management System v1.0 was discovered to contain a SQL injection vulnerability via /hocms/classes/Master.php?f=deletemember...

Sql injection

Home Owners Collection Management System v1.0 was discovered to contain a SQL injection vulnerability via /hocms/classes/Master.php?f=deletephase...

Sql injection

Home Owners Collection Management System v1.0 was discovered to contain a SQL injection vulnerability via /hocms/classes/Master.php?f=deletecollection...

Sql injection

Home Owners Collection Management System v1.0 was discovered to contain a SQL injection vulnerability via /hocms/classes/Master.php?f=deletephase...

CVE-2022-28414

Home Owners Collection Management System v1.0 was discovered to contain a SQL injection vulnerability via /hocms/classes/Master.php?f=deletemember...

CVE-2022-28414

CVE-2022-28414 affects Home Owners Collection Management System v1.0, with a SQL injection vulnerability in /hocms/classes/Master.php?f=delete_member. Root cause: improper input handling enabling SQL injection. Impact: potential disclosure/alteration of database data; per NVD, CVSSv3.1 base score...

CVE-2022-28416

Home Owners Collection Management System v1.0 was discovered to contain a SQL injection vulnerability via /hocms/classes/Master.php?f=deletephase...

CVE-2022-28415

CVE-2022-28415 corresponds to a SQL injection vulnerability in Home Owners Collection Management System v1.0, exploitable via /hocms/classes/Master.php?f=delete_collection. The connected records confirm the affected product and the vulnerable component (Master.php) but do not provide patch versio...

CVE-2022-28416

CVE-2022-28416 affects Home Owners Collection Management System v1.0. The vulnerability is a SQL injection in the delete_phase path exposed via /hocms/classes/Master.php?f=delete_phase, allowing an attacker to manipulate queries and potentially access or modify database data. The surrounding docu...

CVE-2022-28415

Home Owners Collection Management System v1.0 was discovered to contain a SQL injection vulnerability via /hocms/classes/Master.php?f=deletecollection...

CVE-2022-28417

CVE-2022-28417 affects Home Owners Collection Management System v1.0, with a SQL injection in /hocms/classes/Master.php?f=delete_phase. The vulnerability is caused by lack of input filtering/escaping, enabling potentially unauthorized data access/modification via network without authentication. C...

Home Owners Collection Management System SQL注入漏洞

Home Owners Collection Management System is a homeowner collection management system. Home Owners Collection Management System is vulnerable to SQL injection, which can be exploited by attackers to execute illegal SQL commands to steal sensitive database data...

Home Owners Collection Management System SQL注入漏洞

Home Owners Collection Management System is a homeowner collection management system. Home Owners Collection Management System is vulnerable to SQL injection, which can be exploited by attackers to execute illegal SQL commands to steal sensitive database data...

Home Owners Collection Management System Remote Code Execution Vulnerability (CNVD-2022-19486)

A remote code execution vulnerability exists in Home Owners Collection Management System, a homeowner collection management system, which can be exploited by attackers to execute arbitrary code via a crafted PNG file...

Home Owners Collection Management System信任管理问题漏洞

Home Owners Collection Management System, a homeowner collection management system, is vulnerable to a trust management issue stemming from Home Owners Collection Management System v1.0. System v1.0 was found to contain hard-coded credentials, which could be exploited by an attacker to escalate...

CVE-2022-25115

A remote code execution RCE vulnerability in the Avatar parameter under /admin/?page=user/manageuser of Home Owners Collection Management System v1.0 allows attackers to execute arbitrary code via a crafted PNG file...

CVE-2022-25115

A remote code execution RCE vulnerability in the Avatar parameter under /admin/?page=user/manageuser of Home Owners Collection Management System v1.0 allows attackers to execute arbitrary code via a crafted PNG file...

CVE-2022-25045

Home Owners Collection Management System v1.0 was discovered to contain hardcoded credentials which allows attackers to escalate privileges and access the admin panel...