← Back

Changjia Property Management System

changjia_property_management_system

Vendor: Changjia Property Management System Project • 3 CVEs

CVEs (3)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2021-22858
1Changjia Property Management System Project
1Changjia Property Management System
Jun 17, 2026
Feb 17, 2021
N/A· v4
8.8 HIGH· v3
6.5 MEDIUM· v2
Attackers can access the CGE account management function without privilege for permission elevation and execute arbitrary commands or files after obtaining user permissions.
CVE-2021-22857
1Changjia Property Management System Project
1Changjia Property Management System
Jun 17, 2026
Feb 17, 2021
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
The CGE page with download function contains a Directory Traversal vulnerability. Attackers can use this loophole to download system files arbitrarily.
CVE-2021-22856
1Changjia Property Management System Project
1Changjia Property Management System
Jun 17, 2026
Feb 17, 2021
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
The CGE property management system contains SQL Injection vulnerabilities. Remote attackers can inject SQL commands into the parameters in Cookie and obtain data in the database without privilege.