Filtered by vendor Changjia Property Management System Project Subscriptions
Filtered by product Changjia Property Management System Subscriptions
Total 3 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2021-22856 1 Changjia Property Management System Project 1 Changjia Property Management System 2024-09-17 9.8 Critical
The CGE property management system contains SQL Injection vulnerabilities. Remote attackers can inject SQL commands into the parameters in Cookie and obtain data in the database without privilege.
CVE-2021-22858 1 Changjia Property Management System Project 1 Changjia Property Management System 2024-09-17 8.8 High
Attackers can access the CGE account management function without privilege for permission elevation and execute arbitrary commands or files after obtaining user permissions.
CVE-2021-22857 1 Changjia Property Management System Project 1 Changjia Property Management System 2024-09-16 7.5 High
The CGE page with download function contains a Directory Traversal vulnerability. Attackers can use this loophole to download system files arbitrarily.