Changjia Property Management System CVEs and Security Vulnerabilities

Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

CVE-2021-22858

ChanGate EnterPrise Co., Ltd property management system - Broken Authentication

Attackers can access the CGE account management function without privilege for permission elevation and execute arbitrary commands or files after obtaining user permissions.

CVSS 3.1 · 8.8 High EPSS 1.2% KEV · Not listed

Vendors

Changjia Property Management System Project

Products

Changjia Property Management System

CVE-2021-22857

ChanGate EnterPrise Co., Ltd property management system - Directory Traversal

The CGE page with download function contains a Directory Traversal vulnerability. Attackers can use this loophole to download system files arbitrarily.

CVSS 3.1 · 7.5 High EPSS 1.9% KEV · Not listed

Vendors

Changjia Property Management System Project

Products

Changjia Property Management System

CVE-2021-22856

ChanGate EnterPrise Co., Ltd property management system - SQL Injection

The CGE property management system contains SQL Injection vulnerabilities. Remote attackers can inject SQL commands into the parameters in Cookie and obtain data in the database without privilege.

CVSS 3.1 · 9.8 Critical EPSS 1.5% KEV · Not listed

Vendors

Changjia Property Management System Project

Products

Changjia Property Management System

Page 1 of 1.