Home Owners Collection Management System Project Home Owners Collection Management System — known CVE vulnerabilities

Every CVE whose affected-product data names Home Owners Collection Management System Project Home Owners Collection Management System, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (15)

• CVE-2022-28414 — CVSS 9.8 (critical): Home Owners Collection Management System v1.0 was discovered to contain a SQL injection vulnerability via /hocms/classes/Master.php?f=delete…
• CVE-2022-25016 — CVSS 9.8 (critical): Home Owners Collection Management System v1.0 was discovered to contain an arbitrary file upload vulnerability via the component…
• CVE-2022-25045 — CVSS 9.8 (critical): Home Owners Collection Management System v1.0 was discovered to contain hardcoded credentials which allows attackers to escalate privileges…
• CVE-2022-28416 — CVSS 9.8 (critical): Home Owners Collection Management System v1.0 was discovered to contain a SQL injection vulnerability via /hocms/classes/Master.php?f=delete…
• CVE-2022-28415 — CVSS 9.8 (critical): Home Owners Collection Management System v1.0 was discovered to contain a SQL injection vulnerability via /hocms/classes/Master.php?f=delete…
• CVE-2022-25095 — CVSS 9.8 (critical): Home Owners Collection Management System v1.0 allows unauthenticated attackers to compromise user accounts via a crafted POST request.
• CVE-2022-25096 — CVSS 9.8 (critical): Home Owners Collection Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter in…
• CVE-2022-28417 — CVSS 9.8 (critical): Home Owners Collection Management System v1.0 was discovered to contain a SQL injection vulnerability via /hocms/classes/Master.php?f=delete…
• CVE-2022-25094 — CVSS 8.8 (high): Home Owners Collection Management System v1.0 was discovered to contain a remote code execution (RCE) vulnerability via the parameter…
• CVE-2022-25115 — CVSS 7.8 (high): A remote code execution (RCE) vulnerability in the Avatar parameter under /admin/?page=user/manage_user of Home Owners Collection…
• CVE-2024-6440 — CVSS 6.3 (medium): A vulnerability was found in SourceCodester Home Owners Collection Management System 1.0. It has been classified as critical. Affected is…
• CVE-2024-6439 — CVSS 6.3 (medium): A vulnerability was found in SourceCodester Home Owners Collection Management System 1.0 and classified as critical. This issue affects…
• CVE-2022-28077 — CVSS 6.1 (medium): Home Owners Collection Management v1 was discovered to contain a reflected cross-site scripting (XSS) vulnerability in the Admin panel via…
• CVE-2022-25028 — CVSS 6.1 (medium): Home Owners Collection Management System v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the collected_by…
• CVE-2022-28078 — CVSS 6.1 (medium): Home Owners Collection Management v1 was discovered to contain a reflected cross-site scripting (XSS) vulnerability in the Admin panel via…