The CGE property management system contains SQL Injection vulnerabilities. Remote attackers can inject SQL commands into the parameters in Cookie and obtain data in the database without privilege.Referenceshttps://www.twcert.org.tw/tw/cp-132-4394-76d41-1.htmlhttps://www.chtsecurity.com/news/fe1e30ef-4dac-4848-a3c9-a7df12672422
