Home Owners Collection Management System Project vulnerabilities
We track 5 vulnerabilities in Home Owners Collection Management System Project products. 5 are rated high or critical, and none are known to be exploited. The most recent was published on April 21, 2022.
Latest Home Owners Collection Management System Project vulnerabilities
- 9.8 Critical severity
Home Owners Collection Management System: Improper Neutralization of Special Elements used in an SQL Command
Home Owners Collection Management System v1.0 was discovered to contain a SQL injection vulnerability via /hocms/classes/Master.php?f=delete_collection.
- 7.8 High severity
Home Owners Collection Management System: Unrestricted Upload of File with Dangerous Type
A remote code execution (RCE) vulnerability in the Avatar parameter under /admin/?page=user/manage_user of Home Owners Collection Management System v1.0 allows attackers to execute arbitrary code via a crafted PNG file.
- 9.8 Critical severity
Home Owners Collection Management System: Use of Hard-coded Credentials
Home Owners Collection Management System v1.0 was discovered to contain hardcoded credentials which allows attackers to escalate privileges and access the admin panel.
- 9.8 Critical severity
Home Owners Collection Management System: Unrestricted Upload of File with Dangerous Type
Home Owners Collection Management System v1.0 was discovered to contain an arbitrary file upload vulnerability via the component /student_attendance/index.php. This vulnerability allows attackers to execute arbitrary code via a crafted PHP file.
- 9.8 Critical severity
Home Owners Collection Management System: Improper Neutralization of Special Elements used in an SQL Command
Home Owners Collection Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter in /members/view_member.php.