Show filters
15 Total Results
Displaying 1-10 of 15
Sort by:
Attacker Value
Unknown
CVE-2024-6440
Disclosure Date: July 02, 2024 (last updated July 03, 2024)
A vulnerability was found in SourceCodester Home Owners Collection Management System 1.0. It has been classified as critical. Affected is an unknown function of the file /classes/Master.php?f=delete_category. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-270168.
0
Attacker Value
Unknown
CVE-2024-6439
Disclosure Date: July 02, 2024 (last updated July 03, 2024)
A vulnerability was found in SourceCodester Home Owners Collection Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /classes/Users.php?f=save. The manipulation of the argument img leads to unrestricted upload. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-270167.
0
Attacker Value
Unknown
CVE-2022-28078
Disclosure Date: May 11, 2022 (last updated February 23, 2025)
Home Owners Collection Management v1 was discovered to contain a reflected cross-site scripting (XSS) vulnerability in the Admin panel via the $_GET['page'] parameter.
0
Attacker Value
Unknown
CVE-2022-28077
Disclosure Date: May 11, 2022 (last updated February 23, 2025)
Home Owners Collection Management v1 was discovered to contain a reflected cross-site scripting (XSS) vulnerability in the Admin panel via the $_GET['s'] parameter.
0
Attacker Value
Unknown
CVE-2022-28417
Disclosure Date: April 21, 2022 (last updated February 23, 2025)
Home Owners Collection Management System v1.0 was discovered to contain a SQL injection vulnerability via /hocms/classes/Master.php?f=delete_phase.
0
Attacker Value
Unknown
CVE-2022-28416
Disclosure Date: April 21, 2022 (last updated February 23, 2025)
Home Owners Collection Management System v1.0 was discovered to contain a SQL injection vulnerability via /hocms/classes/Master.php?f=delete_phase.
0
Attacker Value
Unknown
CVE-2022-28415
Disclosure Date: April 21, 2022 (last updated February 23, 2025)
Home Owners Collection Management System v1.0 was discovered to contain a SQL injection vulnerability via /hocms/classes/Master.php?f=delete_collection.
0
Attacker Value
Unknown
CVE-2022-28414
Disclosure Date: April 21, 2022 (last updated February 23, 2025)
Home Owners Collection Management System v1.0 was discovered to contain a SQL injection vulnerability via /hocms/classes/Master.php?f=delete_member.
0
Attacker Value
Unknown
CVE-2022-25115
Disclosure Date: March 02, 2022 (last updated February 23, 2025)
A remote code execution (RCE) vulnerability in the Avatar parameter under /admin/?page=user/manage_user of Home Owners Collection Management System v1.0 allows attackers to execute arbitrary code via a crafted PNG file.
0
Attacker Value
Unknown
CVE-2022-25045
Disclosure Date: March 02, 2022 (last updated February 23, 2025)
Home Owners Collection Management System v1.0 was discovered to contain hardcoded credentials which allows attackers to escalate privileges and access the admin panel.
0
