Skip to content
CVE PROGRAM SOURCE RECORD8.8 High

CVE-2022-43437

HWA JIUH DIGITAL TECHNOLOGY LTD. EasyTest - SQL Injection

Description

The Download function’s parameter of EasyTest has insufficient validation for user input. A remote attacker authenticated as a general user can inject arbitrary SQL command to access, modify or delete database.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

HWA JIUH DIGITAL TECHNOLOGY LTD. EasyTest

  • 17L18Saffected

References