SQL Injection Vulnerability in Home Owners Collection Management System by Oretnom23
CVE-2022-25096

9.8CRITICAL

Key Information:

Vendor: Home Owners Collection Management System Project
Status: Home Owners Collection Management System
Vendor: CVE Published:; 26 February 2022

🔔 Create Home Owners Collection Management System Project Vulnerability Alert

Badges

👾 Exploit Exists🟡 Public PoC

What is CVE-2022-25096?

The Home Owners Collection Management System v1.0 has been identified with a SQL injection vulnerability that occurs through the id parameter in the /members/view_member.php file. This flaw allows attackers to manipulate database queries, potentially leading to unauthorized access to sensitive information. It is essential for users of this system to apply security measures and updates to mitigate the risk posed by this vulnerability.

Exploit Proof of Concept (PoC)

PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.

CVE-2022-25096 - Proof of Concept