PT-2022-19008
CVE-2022-28416
·
تاريخ النشر
2022-04-21
·
تاريخ التحديث
2022-04-28
الوصف من
CVSS 3.1
9.8
حرجةالمقاييسAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
Home Owners Collection Management System version 1.0
Description
A SQL injection issue was found in the Home Owners Collection Management System. The vulnerability can be exploited via the /hocms/classes/Master.php API endpoint, specifically through the
f parameter set to delete phase.Recommendations
For Home Owners Collection Management System version 1.0, consider restricting access to the
delete phase function in the Master.php file until a patch is available. Avoid using the f parameter in the /hocms/classes/Master.php endpoint with the value delete phase to minimize the risk of exploitation.قابلية الاستغلال
استغلال
إصلاح
التأثيرات
الباحثون
المورّدون
المنتجات المتأثرة
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾