Critical severity9.8NVD Advisory· Published Mar 17, 2021· Updated Jun 17, 2026

CVE-2021-22859

Description

The users’ data querying function of EIC e-document system does not filter the special characters which resulted in remote attackers can inject SQL syntax and execute arbitrary commands without privilege.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

EIC/E Document System2 versions
cpe:2.3:a:eic:e-document_system:3.0.2:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:eic:e-document_system:3.0.2:*:*:*:*:*:*:*
- (no CPE)
Excellent Infotek Corporation/e-document systemv5
Range: 0 3.0.2

Patches

Vulnerability mechanics

References

gist.github.com/tonykuo76/807c838b75879b0d327782dfcd2c3beanvdThird Party Advisory
www.chtsecurity.com/news/c974fd28-c19b-4003-82f3-818904057496nvdThird Party Advisory
www.twcert.org.tw/tw/cp-132-4517-51e25-1.htmlnvdThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.637
epss	0.003
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000