CVE-2024-43772

CRITICAL 9.8CVE-2024-43772 · Published 02/09/2024 · updated 17/06/2026

In short

CVE-2024-43772 is a CRITICAL (CVSS 9.8) vulnerability affecting easytest online test platform (easytest).
Chance of exploitation in the next 30 days (EPSS): 0.49%, higher than 42.1% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
easytest online test platform easytest	`≤ 24e01`	No fix yet

Description

SQL Injection in download student learning course function of Easytest Online Test Platform ver.24E01 and earlier allow remote attackers to execute arbitrary SQL commands via the uid parameter.

References

zuso.ai/advisory/za-2024-05 · Third Party Advisory

More vulnerabilities in easytest online test platform

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

easytest online test platform

easytest

≤ 24e01

No fix yet

More vulnerabilities in easytest online test platform

See all →