SQL Injection Vulnerability in Home Owners Collection Management System by Oretnom23
CVE-2022-28416

9.8CRITICAL

Key Information:

Vendor: Home Owners Collection Management System Project
Status: Home Owners Collection Management System
Vendor: CVE Published:; 21 April 2022

🔔 Create Home Owners Collection Management System Project Vulnerability Alert

What is CVE-2022-28416?

A SQL injection vulnerability has been identified in version 1.0 of the Home Owners Collection Management System. This vulnerability allows attackers to manipulate SQL queries, potentially leading to unauthorized access to sensitive data. The vulnerability can be exploited via the 'delete_phase' function in the Master.php file, which fails to properly validate user inputs. As a result, malicious actors could execute arbitrary SQL code, exposing the application and its underlying database to further exploitation.

References

https://github.com/k0xx11/bug_report/blob/main/vendors/or...

x_refsource_MISC

CVSS V3.1

Score:

9.8

Severity:

CRITICAL

Confidentiality:

High

Integrity:

High

Availability:

High

Attack Vector:

Network

Attack Complexity:

Low

Privileges Required:

None

User Interaction:

None

Scope:

Unchanged

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Apr 21, 2022
Vulnerability Reserved
Apr 4, 2022

CVE-2022-28416 Data

JSON