CVE-2022-28414

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

Home Owners Collection Management System v1.0 was discovered to contain a SQL injection vulnerability via /hocms/classes/Master.php?f=delete_member.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-89

Affected software

No affected versions have been published.

Timeline

Published
Apr 21, 2022
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2022

CVE-2022-284159.8Home Owners Collection Management System v1.0 was discovered to contain a SQL injection vulnerability via /hocms/classes/Master.php?f=deleteCVE-2022-284169.8Home Owners Collection Management System v1.0 was discovered to contain a SQL injection vulnerability via /hocms/classes/Master.php?f=deleteCVE-2022-284179.8Home Owners Collection Management System v1.0 was discovered to contain a SQL injection vulnerability via /hocms/classes/Master.php?f=deleteCVE-2022-28429.8A vulnerability classified as critical has been found in SourceCodester Gym Management System. This affects an unknown part of the file logiCVE-2022-284209.8Baby Care System v1.0 was discovered to contain a SQL injection vulnerability via BabyCare/admin.php?id=theme&setid=.CVE-2022-284219.8Baby Care System v1.0 was discovered to contain a SQL injection vulnerability via /admin.php?id=posts&action=display&value=1&postid=.CVE-2022-284229.8Baby Care System v1.0 was discovered to contain a SQL injection vulnerability via /admin/posts.php&action=edit.CVE-2022-284239.8Baby Care System v1.0 was discovered to contain a SQL injection vulnerability via /admin/posts.php&action=delete.CVE-2022-284249.8Baby Care System v1.0 was discovered to contain a SQL injection vulnerability via /admin/posts.php&find=.CVE-2022-284259.8Baby Care System v1.0 was discovered to contain a SQL injection vulnerability via /admin/pagerole.php&action=display&value=1&roleid=.CVE-2022-284269.8Baby Care System v1.0 was discovered to contain a SQL injection vulnerability via /admin/pagerole.php&action=edit&roleid=.CVE-2022-284279.8Baby Care System v1.0 was discovered to contain a SQL injection vulnerability via /admin/inbox.php&action=read&msgid=.
CVE-2022-28414: Critical severity, CVSS 9.8 | Vulnix