Home Owners Collection Management System CVE-2022-25115

HIGH

Unrestricted Upload of File with Dangerous Type (CWE-434)

2022-03-02 cve@mitre.org

RCE File Upload Home Owners Collection Management System

7.8

CVSS 3.1 · NVD

Share

Severity by source

NVD PRIMARY

7.8 HIGH

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Attack Vector

Local

Attack Complexity

Low

Privileges Required

None

User Interaction

Required

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

1

CVE Published

Mar 02, 2022 - 23:15 nvd

HIGH 7.8

DescriptionNVD

A remote code execution (RCE) vulnerability in the Avatar parameter under /admin/?page=user/manage_user of Home Owners Collection Management System v1.0 allows attackers to execute arbitrary code via a crafted PNG file.

AnalysisAI

A remote code execution (RCE) vulnerability in the Avatar parameter under /admin/?page=user/manage_user of Home Owners Collection Management System v1.0 allows attackers to execute arbitrary code via. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Technical ContextAI

This vulnerability is classified as Unrestricted File Upload (CWE-434), which allows attackers to upload malicious files that can be executed on the server. A remote code execution (RCE) vulnerability in the Avatar parameter under /admin/?page=user/manage_user of Home Owners Collection Management System v1.0 allows attackers to execute arbitrary code via a crafted PNG file. Affected products include: Home Owners Collection Management System Project Home Owners Collection Management System.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Validate file types server-side, store uploads outside webroot, use random filenames, scan for malware.

More in Home Owners Collection Management System

View all

CVE-2022-28417 CRITICAL Act Now POC

Home Owners Collection Management System v1.0 was discovered to contain a SQL injection vulnerability via /hocms/classes

CVE-2022-28416 CRITICAL Act Now POC

Home Owners Collection Management System v1.0 was discovered to contain a SQL injection vulnerability via /hocms/classes

CVE-2022-28415 CRITICAL Act Now POC

Home Owners Collection Management System v1.0 was discovered to contain a SQL injection vulnerability via /hocms/classes

CVE-2022-28414 CRITICAL Act Now POC

Home Owners Collection Management System v1.0 was discovered to contain a SQL injection vulnerability via /hocms/classes

CVE-2022-25045 CRITICAL Act Now POC

Home Owners Collection Management System v1.0 was discovered to contain hardcoded credentials which allows attackers to

CVE-2022-25016 CRITICAL Act Now POC

Home Owners Collection Management System v1.0 was discovered to contain an arbitrary file upload vulnerability via the c

CVE-2022-25096 CRITICAL Act Now POC

Home Owners Collection Management System v1.0 was discovered to contain a SQL injection vulnerability via the id paramet

CVE-2022-25095 CRITICAL Act Now POC

Home Owners Collection Management System v1.0 allows unauthenticated attackers to compromise user accounts via a crafted

CVE-2022-25094 HIGH This Week POC

Home Owners Collection Management System v1.0 was discovered to contain a remote code execution (RCE) vulnerability via

CVE-2022-25028 MEDIUM This Month POC

Home Owners Collection Management System v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability via t

CVE-2024-6440 MEDIUM This Month POC

A vulnerability was found in SourceCodester Home Owners Collection Management System 1.0. Rated medium severity (CVSS 5.

CVE-2024-6439 MEDIUM This Month POC

A vulnerability was found in SourceCodester Home Owners Collection Management System 1.0 and classified as critical.php?

Same weakness CWE-434 – Unrestricted Upload of File with Dangerous Type

View all

CVE-2016-3088 CRITICAL POC

CVE-2021-31207 MEDIUM POC

CVE-2017-12617 HIGH POC

CVE-2017-11357 CRITICAL POC

CVE-2017-12615 HIGH POC

CVE-2024-5084 CRITICAL POC

CVE-2020-36847 CRITICAL POC

CVE-2017-6090 HIGH POC

Same technique RCE

View all

CVE-2017-7269 CRITICAL POC

CVE-2012-4681 CRITICAL POC

CVE-2015-5119 CRITICAL POC

CVE-2016-4117 CRITICAL POC

CVE-2015-3113 CRITICAL POC

CVE-2011-2462 CRITICAL POC

CVE-2025-53770 CRITICAL POC

CVE-2020-7961 CRITICAL POC

Share

CVE-2022-25115 vulnerability details – vuln.today

Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy