EUVD-2024-40442

Malicious code in bioql PyPI...

CVE-2024-43773: Improper Neutralization of Special Elements used in an SQL Command

SQL Injection in download class learning course function of Easytest Online Test Platform ver.24E01 and earlier allow remote attackers to execute arbitrary SQL commands via the cstr parameter...

PT-2024-30645 · Unknown · Easytest Online Test Platform

Name of the Vulnerable Software and Affected Versions: Easytest Online Test Platform versions 24E01 and earlier Description: The issue allows remote attackers to execute arbitrary SQL commands via the cstr parameter in the download class learning course function. This enables attackers to...