Description
Easy test Online Learning and Testing Platform from HWA JIUH DIGITAL TECHNOLOGY does not properly validate a specific page parameter, allowing remote attackers with regular privilege to inject arbitrary SQL commands to read, modify, and delete database contents.
References (2)
Core 2
Core References
Vendor Advisory third-party-advisory
https://www.twcert.org.tw/tw/cp-132-8028-360e1-1.html
Vendor Advisory third-party-advisory
https://www.twcert.org.tw/en/cp-139-8032-a3d5c-2.html
Scores
CVSS v3
8.8
EPSS
0.0067
EPSS Percentile
47.5%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CISA SSVC
Vulnrichment
Exploitation
none
Automatable
no
Technical Impact
total
Details
CWE
CWE-89
Status
published
Products (1)
easy_test_online_learning_and_testing_platform_project/easy_test_online_learning_and_testing_platform
< 24a01
Published
Aug 30, 2024
Tracked Since
Feb 18, 2026