Skip to main content

Home Owners Collection Management System CVE-2022-25095

CRITICAL
2022-02-26 cve@mitre.org
Information Disclosure Home Owners Collection Management System
9.8
CVSS 3.1 · NVD
Share

Severity by source

NVD PRIMARY
9.8 CRITICAL
AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High

Lifecycle Timeline

1
CVE Published
Feb 26, 2022 - 00:15 nvd
CRITICAL 9.8

DescriptionNVD

Home Owners Collection Management System v1.0 allows unauthenticated attackers to compromise user accounts via a crafted POST request.

AnalysisAI

Home Owners Collection Management System v1.0 allows unauthenticated attackers to compromise user accounts via a crafted POST request. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Technical ContextAI

Home Owners Collection Management System v1.0 allows unauthenticated attackers to compromise user accounts via a crafted POST request. Affected products include: Home Owners Collection Management System Project Home Owners Collection Management System.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.

More in Home Owners Collection Management System

View all
CVE-2022-28417 CRITICAL POC
9.8 Apr 21

Home Owners Collection Management System v1.0 was discovered to contain a SQL injection vulnerability via /hocms/classes
CVE-2022-28416 CRITICAL POC
9.8 Apr 21

Home Owners Collection Management System v1.0 was discovered to contain a SQL injection vulnerability via /hocms/classes
CVE-2022-28415 CRITICAL POC
9.8 Apr 21

Home Owners Collection Management System v1.0 was discovered to contain a SQL injection vulnerability via /hocms/classes
CVE-2022-28414 CRITICAL POC
9.8 Apr 21

Home Owners Collection Management System v1.0 was discovered to contain a SQL injection vulnerability via /hocms/classes
CVE-2022-25045 CRITICAL POC
9.8 Mar 02

Home Owners Collection Management System v1.0 was discovered to contain hardcoded credentials which allows attackers to

CVE-2022-25016 CRITICAL POC
9.8 Mar 02

Home Owners Collection Management System v1.0 was discovered to contain an arbitrary file upload vulnerability via the c
CVE-2022-25096 CRITICAL POC
9.8 Feb 26

Home Owners Collection Management System v1.0 was discovered to contain a SQL injection vulnerability via the id paramet
CVE-2022-25094 HIGH POC
8.8 Feb 26

Home Owners Collection Management System v1.0 was discovered to contain a remote code execution (RCE) vulnerability via

CVE-2022-25115 HIGH POC
7.8 Mar 02

A remote code execution (RCE) vulnerability in the Avatar parameter under /admin/?page=user/manage_user of Home Owners C
CVE-2022-25028 MEDIUM POC
6.1 Feb 28

Home Owners Collection Management System v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability via t
CVE-2024-6440 MEDIUM POC
5.3 Jul 02

A vulnerability was found in SourceCodester Home Owners Collection Management System 1.0. Rated medium severity (CVSS 5.
CVE-2024-6439 MEDIUM POC
5.3 Jul 02

A vulnerability was found in SourceCodester Home Owners Collection Management System 1.0 and classified as critical.php?

Same technique Information Disclosure

View all
CVE-2013-2251 CRITICAL POC
9.8
CVE-2017-5638 CRITICAL POC
9.8
CVE-2025-24813 CRITICAL POC
9.8
CVE-2015-1701 HIGH POC
7.8
CVE-2017-0147 HIGH POC
7.5
CVE-2014-6324 HIGH POC
8.8
CVE-2023-7028 CRITICAL POC
10.0
CVE-2017-0213 HIGH POC
7.3

Share

CVE-2022-25095 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy