Vulnerabilities

TI-2024-05977 CVE-2024-6440 · GHSA-c7xh-mv7v-2w2g

SourceCodester Home Owners Collection Management System sql injection

MEDIUM 57

A vulnerability was found in SourceCodester Home Owners Collection Management System 1.0.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00534 Published 2024-07-02 No fix listed CWE-89

TI-2024-05976 CVE-2024-6439 · GHSA-cqjw-j5w9-9xhj

SourceCodester Home Owners Collection Management System unrestricted upload

MEDIUM 57

A vulnerability was found in SourceCodester Home Owners Collection Management System 1.0 and classified as critical.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00676 Published 2024-07-02 No fix listed CWE-434

TI-2022-10898 CVE-2022-28078 · GHSA-p89f-75fg-cwrq

Home Owners Collection Management v1 was discovered to contain a reflected cross-site…

LOW 29

Home Owners Collection Management v1 was discovered to contain a reflected cross-site scripting (XSS) vulnerability in the Admin panel via the $_GET['page'] parameter.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.01113 Published 2022-05-11 No fix listed CWE-79

TI-2022-10897 CVE-2022-28077 · GHSA-p46m-66m6-wpmc

Home Owners Collection Management v1 was discovered to contain a reflected cross-site…

LOW 29

Home Owners Collection Management v1 was discovered to contain a reflected cross-site scripting (XSS) vulnerability in the Admin panel via the $_GET['s'] parameter.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00825 Published 2022-05-11 No fix listed CWE-79

TI-2022-11152 CVE-2022-28414 · GHSA-wc38-v432-64pf

Home Owners Collection Management System v1.0 was discovered to contain a SQL injection…

MEDIUM 45

Home Owners Collection Management System v1.0 was discovered to contain a SQL injection vulnerability via /hocms/classes/Master.php?f=delete_member.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01239 Published 2022-04-21 No fix listed CWE-89

TI-2022-11154 CVE-2022-28416 · GHSA-rffg-gjv5-9xm5

Home Owners Collection Management System v1.0 was discovered to contain a SQL injection…

MEDIUM 45

Home Owners Collection Management System v1.0 was discovered to contain a SQL injection vulnerability via /hocms/classes/Master.php?f=delete_phase.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01289 Published 2022-04-21 No fix listed CWE-89

TI-2022-11153 CVE-2022-28415 · GHSA-8rmq-ww7h-f5hj

Home Owners Collection Management System v1.0 was discovered to contain a SQL injection…

MEDIUM 45

Home Owners Collection Management System v1.0 was discovered to contain a SQL injection vulnerability via /hocms/classes/Master.php?f=delete_collection.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01289 Published 2022-04-21 No fix listed CWE-89

TI-2022-11155 CVE-2022-28417 · GHSA-jm59-8xwf-98qw

Home Owners Collection Management System v1.0 was discovered to contain a SQL injection…

MEDIUM 45

Home Owners Collection Management System v1.0 was discovered to contain a SQL injection vulnerability via /hocms/classes/Master.php?f=delete_phase.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01289 Published 2022-04-21 No fix listed CWE-89

TI-2022-08847 CVE-2022-25115 · GHSA-9f6h-7v3v-h952

A remote code execution (RCE) vulnerability in the Avatar parameter under…

LOW 37

A remote code execution (RCE) vulnerability in the Avatar parameter under /admin/?page=user/manage_user of Home Owners Collection Management System v1.0 allows attackers to execute arbitrary code via a crafted PNG file.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.01628 Published 2022-03-02 No fix listed CWE-434

TI-2022-08810 CVE-2022-25045 · GHSA-fx79-mjmf-224h

Home Owners Collection Management System v1.0 was discovered to contain hardcoded…

MEDIUM 45

Home Owners Collection Management System v1.0 was discovered to contain hardcoded credentials which allows attackers to escalate privileges and access the admin panel.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01307 Published 2022-03-02 No fix listed CWE-798

TI-2022-08795 CVE-2022-25016 · GHSA-x34x-f5fq-583h

Home Owners Collection Management System v1.0 was discovered to contain an arbitrary file…

MEDIUM 46

Home Owners Collection Management System v1.0 was discovered to contain an arbitrary file upload vulnerability via the component /student_attendance/index.php.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02015 Published 2022-03-02 No fix listed CWE-434

TI-2022-08804 CVE-2022-25028 · GHSA-2369-w664-2vw7

Home Owners Collection Management System v1.0 was discovered to contain a cross-site…

LOW 28

Home Owners Collection Management System v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the collected_by parameter under the List of Collections module.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00641 Published 2022-02-28 No fix listed CWE-79

TI-2022-08839 CVE-2022-25096 · GHSA-p9p3-9cv9-8vgq

Home Owners Collection Management System v1.0 was discovered to contain a SQL injection…

MEDIUM 46

Home Owners Collection Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter in /members/view_member.php.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02118 Published 2022-02-25 No fix listed CWE-89

TI-2022-08838 CVE-2022-25095 · GHSA-8xjg-q4wh-3jm3

Home Owners Collection Management System v1.0 allows unauthenticated attackers to…

MEDIUM 45

Home Owners Collection Management System v1.0 allows unauthenticated attackers to compromise user accounts via a crafted POST request.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01373 Published 2022-02-25 No fix listed

TI-2022-08837 CVE-2022-25094 · GHSA-mp2j-h2w8-ghwm

Home Owners Collection Management System v1.0 was discovered to contain a remote code…

MEDIUM 58

Home Owners Collection Management System v1.0 was discovered to contain a remote code execution (RCE) vulnerability via the parameter "cover" in SystemSettings.php.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.23261 Published 2022-02-25 No fix listed

Vulnerabilities

Filters