PT-2021-23577 · Easytest · Easytest

Eric Wang · Published 2021-10-15 · Updated 2021-10-20 · CVE-2021-42334

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Easytest (affected versions not specified)

Description The issue concerns SQL injection vulnerabilities. After obtaining a user's privilege, remote attackers can inject SQL commands into the parameters of the elective course management page to obtain all database and administrator permissions.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

SQL injection

Weakness Enumeration

CWE-89

Related Identifiers

CVE-2021-42334

Affected Products

Easytest

References · 4

• https://osv.dev/vulnerability/CVE-2021-42334 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-42334 · Security Note
• https://twcert.org.tw/tw/cp-132-5204-f80ad-1.html · Note
• https://t.me/cibsecurity/30625 · Telegram Post