TVN ID	TVN-202110006
CVE ID	CVE-2021-42334
CVSS	8.8 (High) CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Affected Products	Huachu Digital Technology Co.,Ltd. Easytest ver.1705
Description	The Easytest online learning platform contains SQL injection vulnerabilities. After obtaining a user’s privilege, remote attackers can inject SQL commands into the parameters of the elective course management page to obtain all database and administrator permissions.
Solution	Update Easytest to version 2100
Credit	Eric Wang
Public Date	2021-10-15