Huachu Digital Technology Co.,Ltd. Easytest - SQL Injection-1
21Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 8.8epss 1.1%
exploitation probability
1.1%top 35% of all CVEs
observed exploitation
nono source reports it
The Easytest contains SQL injection vulnerabilities. After obtaining user’s privilege, remote attackers can inject SQL commands into the parameters of the learning history page to access all database and obtain administrator permissions.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Affected products
Huachu Digital Technology Co.,Ltd. · Easytest