What is CVE-2024-43774?

CVE-2024-43774 is a high-severity vulnerability in Easytest Online Test Platform, classified under SQL Injection. CVSS score: 8.8/10. Published 2024-09-02.

How severe is CVE-2024-43774?

High severity. CVSS v3 base score is 8.8 out of 10.

SQL Injection in Easytest Online Test Platform

CVE-2024-43774

SQL Injection in download personal learning course function of Easytest Online Test Platform ver.24E01 and earlier allow remote authenticated users to execute arbitrary SQL commands via the uid parameter.

Vulnerability class: SQL Injection

EPSS: 0.005 (38.8th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 8.8 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.

Affected products

Easytest Easytest_online_test_platform
Huachu Digital Technology Ltd. Easytest Online Test Platform — versions 0

Weakness classification (CWE)

CWE-89 — SQL Injection

References

ART@zuso.ai (Third Party Advisory, third-party-advisory)

Frequently asked questions

What is CVE-2024-43774?: CVE-2024-43774 is a high-severity vulnerability in Easytest Online Test Platform, classified under SQL Injection. CVSS score: 8.8/10. Published 2024-09-02.
How severe is CVE-2024-43774?: High severity. CVSS v3 base score is 8.8 out of 10.