Huaju

Records4All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

Huaju records in CISA KEV

No Huaju vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

4 records in Easytest Online Learning Test Platform · all components

TI-2021-18764 CVE-2021-42334 · GHSA-cw52-x4mw-m42c

MEDIUM 40

The Easytest contains SQL injection vulnerabilities.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01123 Published 2021-10-15 No fix listed CWE-89

TI-2021-18763 CVE-2021-42333 · GHSA-6gh7-h93w-h6pc

MEDIUM 40

The Easytest contains SQL injection vulnerabilities.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01123 Published 2021-10-15 No fix listed CWE-89

TI-2021-18765 CVE-2021-42335 · GHSA-89rc-4jgm-q84x

LOW 25

Easytest bulletin board management function of online learning platform does not filter special characters.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00586 Published 2021-10-15 No fix listed CWE-79

TI-2021-18766 CVE-2021-42336 · GHSA-g2g9-w63f-6jrm

LOW 22

The learning history page of the Easytest is vulnerable by permission bypass.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00845 Published 2021-10-15 No fix listed CWE-285