CVE-2022-25045: Use of Hard-coded Credentials

Home Owners Collection Management System v1.0 was discovered to contain hardcoded credentials which allows attackers to escalate privileges and access the admin panel...

CVE-2022-25016: Unrestricted Upload of File with Dangerous Type

Home Owners Collection Management System v1.0 was discovered to contain an arbitrary file upload vulnerability via the component /studentattendance/index.php. This vulnerability allows attackers to execute arbitrary code via a crafted PHP file...

PT-2022-17049

Name of the Vulnerable Software and Affected Versions Home Owners Collection Management System version 1.0 Description The issue allows attackers to execute arbitrary code via a crafted PHP file, exploiting an arbitrary file upload vulnerability in the /student attendance/index.php component...

PT-2022-17083

Name of the Vulnerable Software and Affected Versions Home Owners Collection Management System version 1.0 Description A remote code execution issue exists due to a vulnerability in the Avatar parameter under the "/admin/?page=user/manage user" API endpoint. This allows attackers to execute...

CVE-2022-25115: Unrestricted Upload of File with Dangerous Type

A remote code execution RCE vulnerability in the Avatar parameter under /admin/?page=user/manageuser of Home Owners Collection Management System v1.0 allows attackers to execute arbitrary code via a crafted PNG file...

Homeowners Collection Management System Code Vulnerabilities

A remote code execution vulnerability exists in Home Owners Collection Management System, a homeowner collection management system, which can be exploited by attackers to execute arbitrary code via a crafted PNG file...

Homeowners Collection Management System Code Vulnerabilities

Home Owners Collection Management System is a homeowners collection management system. A security vulnerability exists in Home Owners Collection Management System v1.0, which stems from a lack of filters and restrictions on uploaded files. This allows an attacker to execute arbitrary code via a...

Homeowners Collection Management System: Vulnerabilities in Trust Management

Home Owners Collection Management System, a homeowner collection management system, is vulnerable to a trust management issue stemming from Home Owners Collection Management System v1.0. System v1.0 was found to contain hard-coded credentials, which could be exploited by an attacker to escalate...

PT-2022-17061

Name of the Vulnerable Software and Affected Versions Home Owners Collection Management System version 1.0 Description The issue concerns hardcoded credentials in the system, which allows attackers to escalate privileges and access the admin panel. Recommendations For Home Owners Collection...

EulerOS 2.0 SP9 : kernel (EulerOS-SA-2022-1292)

According to the versions of the kernel packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - The Linux kernel through 5.8.13 does not properly enforce the Secure Boot Forbidden Signature Database aka dbx protection mechanism. This affect...

Home Owners Collection Management System Remote Code Execution Vulnerability

Home Owners Collection Management System is a homeowner collection management system. A remote code execution vulnerability exists in Home Owners Collection Management System, which originates from a parameter cover via SystemSettings.php. The remote code execution RCE vulnerability is caused by ...

Home Owners Collection Management System存在未明漏洞

A security vulnerability exists in the Home Owners Collection Management System, a homeowner collection management system, which can be exploited by attackers to compromise user accounts via a crafted POST request...

Home Owners Collection Management System SQL Injection Vulnerability

Home Owners Collection Management System is an owner collection management system. Home Owners Collection Management System contains a SQL injection vulnerability, which originates from the id parameter in the member view member.php, which is found in Home Owners Collection Management System v1.0...

PT-2022-17057

Name of the Vulnerable Software and Affected Versions Home Owners Collection Management System version 1.0 Description The issue is related to a SQL injection vulnerability. It can be exploited via the id parameter under the "/admin/?page=members/view member&id=2" API endpoint. Recommendations Fo...

CVE-2022-25028

Home Owners Collection Management System v1.0 was discovered to contain a cross-site scripting XSS vulnerability via the collectedby parameter under the List of Collections module...

CVE-2022-25028

Home Owners Collection Management System v1.0 was discovered to contain a cross-site scripting XSS vulnerability via the collectedby parameter under the List of Collections module...

Cross site scripting

Home Owners Collection Management System v1.0 was discovered to contain a cross-site scripting XSS vulnerability via the collectedby parameter under the List of Collections module...

CVE-2022-25028

CVE-2022-25028: A cross-site scripting (XSS) vulnerability affects Home Owners Collection Management System v1.0, exploitable via the collected_by parameter in the List of Collections module. Root cause is insufficient input/output filtering for that parameter, enabling injection of JavaScript. T...

CVE-2022-25028: Improper Neutralization of Input During Web Page Generation

Home Owners Collection Management System v1.0 was discovered to contain a cross-site scripting XSS vulnerability via the collectedby parameter under the List of Collections module...

PT-2022-17056

Name of the Vulnerable Software and Affected Versions Home Owners Collection Management System version 1.0 Description The issue is related to a cross-site scripting XSS vulnerability. This vulnerability can be exploited via the collected by parameter under the List of Collections module...