Lucene search
+L

6715 matches found

OSV
OSV
•added 2022/03/02 5:15 p.m.•17 views

CVE-2022-25016

Home Owners Collection Management System v1.0 was discovered to contain an arbitrary file upload vulnerability via the component /studentattendance/index.php. This vulnerability allows attackers to execute arbitrary code via a crafted PHP file...

9.8CVSS6AI score0.02015EPSS
SaveExploits1References1
attackerkb
attackerkb
•added 2022/03/02 5:15 p.m.•25 views

CVE-2022-25016

Home Owners Collection Management System v1.0 was discovered to contain an arbitrary file upload vulnerability via the component /studentattendance/index.php. This vulnerability allows attackers to execute arbitrary code via a crafted PHP file...

9.8CVSS6.1AI score0.02015EPSS
SaveExploits1References2
NVD
NVD
•added 2022/03/02 5:15 p.m.•30 views

CVE-2022-25016

Home Owners Collection Management System v1.0 was discovered to contain an arbitrary file upload vulnerability via the component /studentattendance/index.php. This vulnerability allows attackers to execute arbitrary code via a crafted PHP file...

9.8CVSS0.02015EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/03/02 12:00 a.m.•9 views

CVE-2022-25045: Use of Hard-coded Credentials

Home Owners Collection Management System v1.0 was discovered to contain hardcoded credentials which allows attackers to escalate privileges and access the admin panel...

9.8CVSS8.2AI score0.01307EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2022/03/02 12:00 a.m.•4 views

PT-2022-17049

Name of the Vulnerable Software and Affected Versions Home Owners Collection Management System version 1.0 Description The issue allows attackers to execute arbitrary code via a crafted PHP file, exploiting an arbitrary file upload vulnerability in the /student attendance/index.php component...

9.8CVSS0.02015EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
•added 2022/03/02 12:00 a.m.•3 views

PT-2022-17061

Name of the Vulnerable Software and Affected Versions Home Owners Collection Management System version 1.0 Description The issue concerns hardcoded credentials in the system, which allows attackers to escalate privileges and access the admin panel. Recommendations For Home Owners Collection...

9.8CVSS0.01307EPSS
SaveExploits1References6
CNNVD
CNNVD
•added 2022/03/02 12:00 a.m.•21 views

Home Owners Collection Management System 代码问题漏洞

Home Owners Collection Management System is a homeowners collection management system. A security vulnerability exists in Home Owners Collection Management System v1.0, which stems from a lack of filters and restrictions on uploaded files. This allows an attacker to execute arbitrary code via a...

9.8CVSS8.8AI score0.02015EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2022/03/02 12:00 a.m.•3 views

PT-2022-17083

Name of the Vulnerable Software and Affected Versions Home Owners Collection Management System version 1.0 Description A remote code execution issue exists due to a vulnerability in the Avatar parameter under the "/admin/?page=user/manage user" API endpoint. This allows attackers to execute...

7.8CVSS0.01615EPSS
SaveExploits1References3
CNNVD
CNNVD
•added 2022/03/02 12:00 a.m.•16 views

Home Owners Collection Management System 信任管理问题漏洞

Home Owners Collection Management System, a homeowner collection management system, is vulnerable to a trust management issue stemming from Home Owners Collection Management System v1.0. System v1.0 was found to contain hard-coded credentials, which could be exploited by an attacker to escalate...

9.8CVSS8.3AI score0.01307EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/03/02 12:00 a.m.•7 views

CVE-2022-25016: Unrestricted Upload of File with Dangerous Type

Home Owners Collection Management System v1.0 was discovered to contain an arbitrary file upload vulnerability via the component /studentattendance/index.php. This vulnerability allows attackers to execute arbitrary code via a crafted PHP file...

9.8CVSS8.5AI score0.02015EPSS
SaveExploits1References2
CNVD
CNVD
•added 2022/03/02 12:00 a.m.•67 views

Home Owners Collection Management System Cross-Site Scripting Vulnerability

Home Owners Collection Management System is a homeowner collection management system. v1.0 of Home Owners Collection Management System is vulnerable to a cross-site scripting vulnerability that originates from a lack of filtering of user-supplied data and output data via the collect by parameter...

6.1CVSS3.5AI score0.00641EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/03/02 12:00 a.m.•4 views

CVE-2022-25115: Unrestricted Upload of File with Dangerous Type

A remote code execution RCE vulnerability in the Avatar parameter under /admin/?page=user/manageuser of Home Owners Collection Management System v1.0 allows attackers to execute arbitrary code via a crafted PNG file...

7.8CVSS8.1AI score0.01615EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2022/03/02 12:00 a.m.•18 views

Home Owners Collection Management System 代码问题漏洞

A remote code execution vulnerability exists in Home Owners Collection Management System, a homeowner collection management system, which can be exploited by attackers to execute arbitrary code via a crafted PNG file...

7.8CVSS8.5AI score0.01615EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
•added 2022/03/02 12:00 a.m.•98 views

EulerOS 2.0 SP9 : kernel (EulerOS-SA-2022-1292)

According to the versions of the kernel packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - The Linux kernel through 5.8.13 does not properly enforce the Secure Boot Forbidden Signature Database aka dbx protection mechanism. This affect...

8.8CVSS6.4AI score0.01584EPSS
SaveExploits2References11
CNVD
CNVD
•added 2022/03/01 12:00 a.m.•58 views

Home Owners Collection Management System存在未明漏洞

A security vulnerability exists in the Home Owners Collection Management System, a homeowner collection management system, which can be exploited by attackers to compromise user accounts via a crafted POST request...

9.8CVSS4.9AI score0.01373EPSS
SaveExploits0References1
CNVD
CNVD
•added 2022/03/01 12:00 a.m.•56 views

Home Owners Collection Management System SQL Injection Vulnerability

Home Owners Collection Management System is an owner collection management system. Home Owners Collection Management System contains a SQL injection vulnerability, which originates from the id parameter in the member view member.php, which is found in Home Owners Collection Management System v1.0...

9.8CVSS3.1AI score0.02101EPSS
SaveExploits2References1
Positive Technologies
Positive Technologies
•added 2022/03/01 12:00 a.m.•2 views

PT-2022-17057

Name of the Vulnerable Software and Affected Versions Home Owners Collection Management System version 1.0 Description The issue is related to a SQL injection vulnerability. It can be exploited via the id parameter under the "/admin/?page=members/view member&id=2" API endpoint. Recommendations Fo...

SaveExploits1References3
CNVD
CNVD
•added 2022/03/01 12:00 a.m.•49 views

Home Owners Collection Management System Remote Code Execution Vulnerability

Home Owners Collection Management System is a homeowner collection management system. A remote code execution vulnerability exists in Home Owners Collection Management System, which originates from a parameter cover via SystemSettings.php. The remote code execution RCE vulnerability is caused by ...

8.8CVSS5.4AI score0.23261EPSS
SaveExploits1References1
attackerkb
attackerkb
•added 2022/02/28 11:15 p.m.•16 views

CVE-2022-25028

Home Owners Collection Management System v1.0 was discovered to contain a cross-site scripting XSS vulnerability via the collectedby parameter under the List of Collections module...

6.1CVSS5.6AI score0.00641EPSS
SaveExploits1References2
OSV
OSV
•added 2022/02/28 11:15 p.m.•14 views

CVE-2022-25028

Home Owners Collection Management System v1.0 was discovered to contain a cross-site scripting XSS vulnerability via the collectedby parameter under the List of Collections module...

6.1CVSS6.3AI score0.00641EPSS
SaveExploits1References1
Rows per page
Query Builder