Skip to content
OpenAdvisories

Product · Huachu Digital Technology

Easytest

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 4.3
    CVE-2021-42336

    Huachu Digital Technology Co.,Ltd. Easytest - Improper Authorization

    The learning history page of the Easytest is vulnerable by permission bypass. After obtaining a user’s permission, remote attackers can access other users’ and administrator’s account information except password by crafting URL parameters.

    Huachu Digital Technology Easytest
  • Medium 5.4
    CVE-2021-42335

    Huachu Digital Technology Co.,Ltd. Easytest - Stored XSS

    Easytest bulletin board management function of online learning platform does not filter special characters. After obtaining a user’s privilege, remote attackers can inject JavaScript and execute stored XSS attack.

    Huachu Digital Technology Easytest