Skip to content
CVE PROGRAM SOURCE RECORD9.8 Critical

CVE-2021-22859

EIC e-document system - SQL Injection

Description

The users’ data querying function of EIC e-document system does not filter the special characters which resulted in remote attackers can inject SQL syntax and execute arbitrary commands without privilege.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Excellent Infotek Corporation e-document system

  • 0 3.0.2affected

References