Описание
SQL Injection in download personal learning course function of Easytest Online Test Platform ver.24E01 and earlier allow remote authenticated users to execute arbitrary SQL commands via the uid parameter.
Ссылки
- Third Party Advisory
Уязвимые конфигурации
Конфигурация 1Версия до 24e01 (включая)
cpe:2.3:a:easytest:easytest_online_test_platform:*:*:*:*:*:*:*:*
EPSS
Процентиль: 63%
0.00457
Низкий
8.8 High
CVSS3
Дефекты
CWE-89
CWE-89
Связанные уязвимости
CVSS3: 8.8
github
больше 1 года назад
SQL Injection in download personal learning course function of Easytest Online Test Platform ver.24E01 and earlier allow remote authenticated users to execute arbitrary SQL commands via the uid parameter.
EPSS
Процентиль: 63%
0.00457
Низкий
8.8 High
CVSS3
Дефекты
CWE-89
CWE-89