Approved changes feed: RSS · Atom
cpe:2.3:a:huachu_digital_technology_co.,ltd.:easytest:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Huachu Digital Technology Co.,Ltd. (d4e3367b-e5cf-532e-a10d-edfd36003bf1) |
|---|---|
| Product | Easytest (8d3795f4-ac28-54da-8eda-1e39c5b59da0) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2021-42336 |
vulnerable | 2026-06-08 05:35:22.168341 |
Huachu Digital Technology Co.,Ltd. Easytest - Improper Authorization
MEDIUM (4.3)
The learning history page of the Easytest is vulnerable by permission bypass. After obtaining a user’s permission, remote attackers can access other users’ and administrator’s account information except password by crafting URL parameters.
Published: 2021-10-15T12:10:40.380Z
Updated: 2024-09-16T16:33:19.781Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-42335 |
vulnerable | 2026-06-08 05:35:22.167976 |
Huachu Digital Technology Co.,Ltd. Easytest - Stored XSS
MEDIUM (5.4)
Easytest bulletin board management function of online learning platform does not filter special characters. After obtaining a user’s privilege, remote attackers can inject JavaScript and execute stored XSS attack.
Published: 2021-10-15T12:10:38.906Z
Updated: 2024-09-16T19:05:14.166Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-42334 |
vulnerable | 2026-06-08 05:35:22.167579 |
Huachu Digital Technology Co.,Ltd. Easytest - SQL Injection-2
HIGH (8.8)
The Easytest contains SQL injection vulnerabilities. After obtaining a user’s privilege, remote attackers can inject SQL commands into the parameters of the elective course management page to obtain all database and administrator permissions.
Published: 2021-10-15T12:10:37.398Z
Updated: 2024-09-16T16:17:44.540Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-42333 |
vulnerable | 2026-06-08 05:35:22.166212 |
Huachu Digital Technology Co.,Ltd. Easytest - SQL Injection-1
HIGH (8.8)
The Easytest contains SQL injection vulnerabilities. After obtaining user’s privilege, remote attackers can inject SQL commands into the parameters of the learning history page to access all database and obtain administrator permissions.
Published: 2021-10-15T12:10:35.859Z
Updated: 2024-09-16T23:56:50.380Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.