EXCELLENT INFOTEK eDocument System 3.0.2
Approved changes feed: RSS · Atom
cpe:2.3:a:eic:e-document_system:3.0.2:*:*:*:*:*:*:*
part: a version: 3.0.2 update: *
| Vendor | Eic (54b942e8-9850-5ce7-80d5-b046e8bb4baf) |
|---|---|
| Product | E Document System (b361a692-6632-525f-bf05-d3b3d609a90f) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2021-22860 |
vulnerable | 2026-06-08 05:30:01.657080 |
EIC e-document system - Broken Authentication
CRITICAL (9.8)
EIC e-document system does not perform completed identity verification for sorting and filtering personnel data. The vulnerability allows remote attacker to obtain users’ credential information without logging in the system, and further acquire the privileged permissions and execute arbitrary commends.
Published: 2021-03-17T09:10:31.510Z
Updated: 2024-09-16T16:12:43.224Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-22859 |
vulnerable | 2026-06-08 05:30:01.655469 |
EIC e-document system - SQL Injection
CRITICAL (9.8)
The users’ data querying function of EIC e-document system does not filter the special characters which resulted in remote attackers can inject SQL syntax and execute arbitrary commands without privilege.
Published: 2021-03-17T09:10:30.761Z
Updated: 2024-09-16T23:01:27.719Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.