home owners collection management system project

Top products

The 15 most recently published vulnerabilities affecting home owners collection management system project.

• CVE-2024-6440SourceCodester Home Owners Collection Management System sql injection6.3Jul 2, 2024
• CVE-2024-6439SourceCodester Home Owners Collection Management System unrestricted upload6.3Jul 2, 2024
• CVE-2022-28078Home Owners Collection Management v1 was discovered to contain a reflected cross-site scripting (XSS) vulnerability in the Admin panel via the $_GET['page'] parameter.6.1May 11, 2022
• CVE-2022-28077Home Owners Collection Management v1 was discovered to contain a reflected cross-site scripting (XSS) vulnerability in the Admin panel via the $_GET['s'] parameter.6.1May 11, 2022
• CVE-2022-28414Home Owners Collection Management System v1.0 was discovered to contain a SQL injection vulnerability via /hocms/classes/Master.php?f=delete_member.9.8Apr 21, 2022
• CVE-2022-28416Home Owners Collection Management System v1.0 was discovered to contain a SQL injection vulnerability via /hocms/classes/Master.php?f=delete_phase.9.8Apr 21, 2022
• CVE-2022-28415Home Owners Collection Management System v1.0 was discovered to contain a SQL injection vulnerability via /hocms/classes/Master.php?f=delete_collection.9.8Apr 21, 2022
• CVE-2022-28417Home Owners Collection Management System v1.0 was discovered to contain a SQL injection vulnerability via /hocms/classes/Master.php?f=delete_phase.9.8Apr 21, 2022
• CVE-2022-25115A remote code execution (RCE) vulnerability in the Avatar parameter under /admin/?page=user/manage_user of Home Owners Collection Management System v1.0 allows attackers to execute arbitrary code v...7.8Mar 2, 2022
• CVE-2022-25045Home Owners Collection Management System v1.0 was discovered to contain hardcoded credentials which allows attackers to escalate privileges and access the admin panel.9.8Mar 2, 2022
• CVE-2022-25016Home Owners Collection Management System v1.0 was discovered to contain an arbitrary file upload vulnerability via the component /student_attendance/index.php. This vulnerability allows attackers t...9.8Mar 2, 2022
• CVE-2022-25028Home Owners Collection Management System v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the collected_by parameter under the List of Collections module.6.1Feb 28, 2022
• CVE-2022-25096Home Owners Collection Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter in /members/view_member.php.9.8Feb 25, 2022
• CVE-2022-25095Home Owners Collection Management System v1.0 allows unauthenticated attackers to compromise user accounts via a crafted POST request.9.8Feb 25, 2022
• CVE-2022-25094Home Owners Collection Management System v1.0 was discovered to contain a remote code execution (RCE) vulnerability via the parameter "cover" in SystemSettings.php.8.8Feb 25, 2022