title: Huachu Digital Technology Co.,Ltd. Easytest - SQL Injection-1
description: The Easytest contains SQL injection vulnerabilities. After obtaining user’s privilege, remote attackers can inject SQL commands into the parameters of the learning history page to access all database and obtain administrator permissions.
problem types: CWE-89 SQL Injection
affected:
{
product: Easytest
vendor: Huachu Digital Technology Co.,Ltd.
versions:
status: affected, version: 1705
}
metrics:
cvssV3_1: [
attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: HIGH
baseScore: 8.8
baseSeverity: HIGH
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: LOW
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
version: 3.1
]
solutions: Update Easytest to version 2100