Описание
The CGE property management system contains SQL Injection vulnerabilities. Remote attackers can inject SQL commands into the parameters in Cookie and obtain data in the database without privilege.
Ссылки
- Third Party Advisory
- Third Party Advisory
- Third Party Advisory
- Third Party Advisory
Уязвимые конфигурации
Конфигурация 1
cpe:2.3:a:changjia_property_management_system_project:changjia_property_management_system:1.00:*:*:*:*:*:*:*
EPSS
Процентиль: 54%
0.00313
Низкий
9.8 Critical
CVSS3
7.5 High
CVSS3
5 Medium
CVSS2
Дефекты
CWE-89
CWE-89
Связанные уязвимости
github
около 3 лет назад
The CGE property management system contains SQL Injection vulnerabilities. Remote attackers can inject SQL commands into the parameters in Cookie and obtain data in the database without privilege.
EPSS
Процентиль: 54%
0.00313
Низкий
9.8 Critical
CVSS3
7.5 High
CVSS3
5 Medium
CVSS2
Дефекты
CWE-89
CWE-89