Description
SQL Injection in mock exam function of Easytest Online Test Platform ver.24E01 and earlier allow remote authenticated users to execute arbitrary SQL commands via the qlevel parameter.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Huachu Digital Technology | Easytest Online Test Platform | ≤ ver.24E01 | — |
References
- https://zuso.ai/advisory/za-2024-09 third-party-advisory