Lucene search
K

5 matches found

Cvelist
Cvelist
added 2024/09/02 4:1 a.m.19 views

CVE-2024-43773 Huachu Easytest Online Learning Test Platform - SQL Injection

SQL Injection in download class learning course function of Easytest Online Test Platform ver.24E01 and earlier allow remote attackers to execute arbitrary SQL commands via the cstr parameter...

9.3CVSS0.00457EPSS
Exploits0References1
CVE
CVE
added 2024/09/02 4:1 a.m.50 views

CVE-2024-43773

CVE-2024-43773 affects Easytest Online Test Platform versions 24E01 and earlier. The vulnerability is a SQL injection in the download class learning course function, exploitable via the cstr parameter, enabling remote attackers to execute arbitrary SQL commands. Impact details are described as po...

9.8CVSS10AI score0.00457EPSS
Exploits0References1Affected Software1
CNNVD
CNNVD
added 2024/09/02 12:0 a.m.2 views

Huachu Digital Easytest Online Test Platform 安全漏洞

Huachu Digital Easytest Online Test Platform is an online test platform from Huachu Digital. A security vulnerability exists in Huachu Digital Easytest Online Test Platform version ver.24E01 and prior versions, which is caused by a SQL injection vulnerability in the download class learning course...

9.8CVSS7.9AI score0.00457EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2024/09/01 12:0 a.m.2 views

PT-2024-30645 · Unknown · Easytest Online Test Platform

Name of the Vulnerable Software and Affected Versions: Easytest Online Test Platform versions 24E01 and earlier Description: The issue allows remote attackers to execute arbitrary SQL commands via the cstr parameter in the download class learning course function. This enables attackers to...

9.8CVSS8.7AI score0.00457EPSS
Exploits0References7
OSV
OSV
added 2023/07/20 8:15 p.m.1 views

CVE-2023-3793

A vulnerability was found in Weaver e-cology. It has been rated as critical. This issue affects some unknown processing of the file filelFileDownloadForOutDoc.class of the component HTTP POST Request Handler. The manipulation of the argument fileid with the input 1+WAITFOR+DELAY leads to sql...

9.8CVSS5.7AI score0.00056EPSS
Exploits0References2
Rows per page
Query Builder