PT-2022-17056 · Unknown · Home Owners Collection Management System

Fuuzyap1 · Published 2022-02-28 · Updated 2022-03-08 · CVE-2022-25028

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Home Owners Collection Management System version 1.0

Description The issue is related to a cross-site scripting (XSS) vulnerability. This vulnerability can be exploited via the collected by parameter under the List of Collections module.

Recommendations For Home Owners Collection Management System version 1.0, consider restricting access to the List of Collections module until a patch is available. As a temporary workaround, avoid using the collected by parameter in the affected module to minimize the risk of exploitation.

Exploit

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2022-25028

Affected Products

Home Owners Collection Management System

References · 4

• 🔥 https://raw.githubusercontent.com/fuzzyap1/Vendors-System-Vulnerabilities/main/Home%20Owners%20Collection%20Management%20System/xss.md · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2022-25028 · Security Note
• https://osv.dev/vulnerability/CVE-2022-25028 · Vendor Advisory
• https://t.me/cibsecurity/38230 · Telegram Post