VendorsHome Owners Collection Management System Projecthome_owners_collection_management_systemall versions
Vulnerabilities

Home Owners Collection Management System Project Home Owners Collection Management System

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

15CVEs
CVE-2022-25096
Home Owners Collection Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter in /members/view_member.php.
Published 2022-02-25 · Modified
9.8EPSS 0.021
CVE-2022-25016
Home Owners Collection Management System v1.0 was discovered to contain an arbitrary file upload vulnerability via the component /student_attendance/index.php. This vulnerability allows attackers to execute arbitrary code via a crafted PHP file.
Published 2022-03-02 · Modified
9.8EPSS 0.020
CVE-2022-25095
Home Owners Collection Management System v1.0 allows unauthenticated attackers to compromise user accounts via a crafted POST request.
Published 2022-02-25 · Modified
9.8EPSS 0.014
CVE-2022-25045
Home Owners Collection Management System v1.0 was discovered to contain hardcoded credentials which allows attackers to escalate privileges and access the admin panel.
Published 2022-03-02 · Modified
9.8EPSS 0.013
CVE-2022-28415
Home Owners Collection Management System v1.0 was discovered to contain a SQL injection vulnerability via /hocms/classes/Master.php?f=delete_collection.
Published 2022-04-21 · Modified
9.8EPSS 0.013
CVE-2022-28416
Home Owners Collection Management System v1.0 was discovered to contain a SQL injection vulnerability via /hocms/classes/Master.php?f=delete_phase.
Published 2022-04-21 · Modified
9.8EPSS 0.013
CVE-2022-28417
Home Owners Collection Management System v1.0 was discovered to contain a SQL injection vulnerability via /hocms/classes/Master.php?f=delete_phase.
Published 2022-04-21 · Modified
9.8EPSS 0.013
CVE-2022-28414
Home Owners Collection Management System v1.0 was discovered to contain a SQL injection vulnerability via /hocms/classes/Master.php?f=delete_member.
Published 2022-04-21 · Modified
9.8EPSS 0.012
CVE-2024-6439
SourceCodester Home Owners Collection Management System unrestricted upload
Published 2024-07-02 · Modified
9.8EPSS 0.007
CVE-2024-6440
SourceCodester Home Owners Collection Management System sql injection
Published 2024-07-02 · Modified
9.8EPSS 0.005
CVE-2022-25094
Home Owners Collection Management System v1.0 was discovered to contain a remote code execution (RCE) vulnerability via the parameter "cover" in SystemSettings.php.
Published 2022-02-25 · Modified
8.8EPSS 0.233
CVE-2022-25115
A remote code execution (RCE) vulnerability in the Avatar parameter under /admin/?page=user/manage_user of Home Owners Collection Management System v1.0 allows attackers to execute arbitrary code via a crafted PNG file.
Published 2022-03-02 · Modified
7.8EPSS 0.016
CVE-2022-28078
Home Owners Collection Management v1 was discovered to contain a reflected cross-site scripting (XSS) vulnerability in the Admin panel via the $_GET['page'] parameter.
Published 2022-05-11 · Modified
6.1EPSS 0.011
CVE-2022-28077
Home Owners Collection Management v1 was discovered to contain a reflected cross-site scripting (XSS) vulnerability in the Admin panel via the $_GET['s'] parameter.
Published 2022-05-11 · Modified
6.1EPSS 0.008
CVE-2022-25028
Home Owners Collection Management System v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the collected_by parameter under the List of Collections module.
Published 2022-02-28 · Modified
6.1EPSS 0.006