Home Owners Collection Management System vulnerabilities

5 known vulnerabilities in Home Owners Collection Management System from Home Owners Collection Management System Project. 5 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  Home Owners Collection Management System: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2022-28415Apr 21, 2022Home Owners Collection Management System ProjectEPSS 1.29%

  Home Owners Collection Management System v1.0 was discovered to contain a SQL injection vulnerability via /hocms/classes/Master.php?f=delete_collection.

• 7.8 High severity

  Home Owners Collection Management System: Unrestricted Upload of File with Dangerous Type

  CVE-2022-25115Mar 2, 2022Home Owners Collection Management System ProjectEPSS 1.63%

  A remote code execution (RCE) vulnerability in the Avatar parameter under /admin/?page=user/manage_user of Home Owners Collection Management System v1.0 allows attackers to execute arbitrary code via a crafted PNG file.

• 9.8 Critical severity

  Home Owners Collection Management System: Use of Hard-coded Credentials

  CVE-2022-25045Mar 2, 2022Home Owners Collection Management System ProjectEPSS 1.31%

  Home Owners Collection Management System v1.0 was discovered to contain hardcoded credentials which allows attackers to escalate privileges and access the admin panel.

• 9.8 Critical severity

  Home Owners Collection Management System: Unrestricted Upload of File with Dangerous Type

  CVE-2022-25016Mar 2, 2022Home Owners Collection Management System ProjectEPSS 2.02%

  Home Owners Collection Management System v1.0 was discovered to contain an arbitrary file upload vulnerability via the component /student_attendance/index.php. This vulnerability allows attackers to execute arbitrary code via a crafted PHP file.

• 9.8 Critical severity

  Home Owners Collection Management System: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2022-25096Feb 26, 2022Home Owners Collection Management System ProjectEPSS 2.12%

  Home Owners Collection Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter in /members/view_member.php.