Vulnerabilities > Home Owners Collection Management System Project > Home Owners Collection Management System > High

DATE	CVE	VULNERABILITY TITLE	RISK
2022-03-02	CVE-2022-25115	Unrestricted Upload of File with Dangerous Type vulnerability in Home Owners Collection Management System Project Home Owners Collection Management System 1.0 A remote code execution (RCE) vulnerability in the Avatar parameter under /admin/?page=user/manage_user of Home Owners Collection Management System v1.0 allows attackers to execute arbitrary code via a crafted PNG file. local low complexity home-owners-collection-management-system-project CWE-434	7.8
2022-02-26	CVE-2022-25094	Unspecified vulnerability in Home Owners Collection Management System Project Home Owners Collection Management System 1.0 Home Owners Collection Management System v1.0 was discovered to contain a remote code execution (RCE) vulnerability via the parameter "cover" in SystemSettings.php. network low complexity home-owners-collection-management-system-project	8.8

CVE is a registered MITRE Corporation trademark and MITRE's CVE website is the authoritative source of CVE content. CWE is a registered MITRE Corporation trademark and MITRE's CWE website is the authoritative source of CWE content.