TI-2024-09255 CVE-2024-9972 · GHSA-2c54-rg2j-482cChanGate Property Management System - SQL InjectionPriority MEDIUM 50Property Management System from ChanGate has a SQL Injection vulnerability, allowing unauthenticated remote attackers to inject arbitrary SQL commands to read, modify, and delete database contents.CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00679 · Published 2024-10-15 · No fix listed CWE-89