Description (CNA)
The Easytest contains SQL injection vulnerabilities. After obtaining a user’s privilege, remote attackers can inject SQL commands into the parameters of the elective course management page to obtain all database and administrator permissions.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Huachu Digital Technology Co.,Ltd. / Easytest | affected 1705 |
CWE
CWE-89
References
ADP enrichment
No English description supplied.