Lucene search
TwcertCVELIST:CVE-2021-42333HistoryOct 15, 2021 - 12:10 p.m.
CVE-2021-42333 Huachu Digital Technology Co.,Ltd. Easytest - SQL Injection-1
2021-10-1512:10:35
CWE-89
twcert
www.cve.org
3
huachu digital technology
sql injection
user privilege
remote attackers
learning history page
database access
administrator permissions
CVSS3
8.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
AI Score
9.4
Confidence
High
EPSS
0.001
Percentile
44.5%
The Easytest contains SQL injection vulnerabilities. After obtaining user’s privilege, remote attackers can inject SQL commands into the parameters of the learning history page to access all database and obtain administrator permissions.
CNA Affected
[
{
"product": "Easytest",
"vendor": "Huachu Digital Technology Co.,Ltd.",
"versions": [
{
"status": "affected",
"version": "1705"
}
]
}
]Related
nvd
nvd
CVE-2021-42333
2021-10-15 12:15:07
prion
prion
Sql injection
2021-10-15 12:15:00
cve
cve
CVE-2021-42333
2021-10-15 12:15:07
cnvd
cnvd
Easytest SQL Injection Vulnerability (CNVD-2021-83597)
2021-10-19 00:00:00
CVSS3
8.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
AI Score
9.4
Confidence
High
EPSS
0.001
Percentile
44.5%
Related for CVELIST:CVE-2021-42333