汇总 easytest 相关全部产品的 CVE 与安全漏洞情报，包括 CVSS、EPSS、公开时间与漏洞情报数据。
已披露问题常与 SQL 注入 相关，可能在 生产负载与软件部署 场景中带来 数据泄露 等暴露风险。
相关漏洞数据主要来源于公开漏洞披露与安全公告，可用于评估历史漏洞暴露面与修复优先级。
| CVE | 摘要 | 来源 | 最高 CVSS | EPSS % | 公开时间 | 更新时间 |
|---|---|---|---|---|---|---|
| CVE-2024-7871 | SQL Injection in online dictionary function of Easytest Online Test Platform ver.24E01 and earlier allow remote authenticated users to execute arbitrary SQL commands via the word parameter. | [email protected] | 8.7 | 0.46% | 2024-09-02 | 2026-01-23 |
| CVE-2024-43776 | SQL Injection in mock exam function of Easytest Online Test Platform ver.24E01 and earlier allow remote authenticated users to execute arbitrary SQL commands via the qlevel parameter. | [email protected] | 8.7 | 0.46% | 2024-09-02 | 2024-09-04 |
| CVE-2024-43775 | SQL Injection in search course titles function of Easytest Online Test Platform ver.24E01 and earlier allow remote authenticated users to execute arbitrary SQL commands via the search parameter. | [email protected] | 8.7 | 0.46% | 2024-09-02 | 2024-09-04 |
| CVE-2024-43774 | SQL Injection in download personal learning course function of Easytest Online Test Platform ver.24E01 and earlier allow remote authenticated users to execute arbitrary SQL commands via the uid parameter. | [email protected] | 8.7 | 0.46% | 2024-09-02 | 2024-09-04 |
| CVE-2024-43773 | SQL Injection in download class learning course function of Easytest Online Test Platform ver.24E01 and earlier allow remote attackers to execute arbitrary SQL commands via the cstr parameter. | [email protected] | 9.3 | 0.46% | 2024-09-02 | 2024-09-04 |
| CVE-2024-43772 | SQL Injection in download student learning course function of Easytest Online Test Platform ver.24E01 and earlier allow remote attackers to execute arbitrary SQL commands via the uid parameter. | [email protected] | 9.3 | 0.46% | 2024-09-02 | 2024-09-04 |