Changate Enterprise Co., Ltd Property Management System
3 CVEs affecting Changate Enterprise Co., Ltd Property Management System. Latest disclosed: 2021-02-17. Critical: 1, High: 2.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2021-22856 | Critical | 9.8 | 2021-02-17 | The CGE property management system contains SQL Injection vulnerabilities. Remote attackers can inject SQL commands into the parameters in Cookie and obtain da… |
CVE-2021-22858 | High | 8.8 | 2021-02-17 | Attackers can access the CGE account management function without privilege for permission elevation and execute arbitrary commands or files after obtaining use… |
CVE-2021-22857 | High | 7.5 | 2021-02-17 | The CGE page with download function contains a Directory Traversal vulnerability. Attackers can use this loophole to download system files arbitrarily. |