deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2021-3882
Published: 2021-10-14
Description: LedgerSMB does not set the 'Secure' attribute on the session authorization cookie when the client uses HTTPS and the LedgerSMB server is behind a reverse proxy. By tricking a user to use an unencrypted connection (HTTP), an attacker may be able to obtain the authentication data by capturing network traffic. LedgerSMB 1.8 and newer switched from Basic authentication to using cookie authentication with encrypted cookies. Although an attacker can't access the information inside the cookie, nor the password of the user, possession of the cookie is enough to access the application as the user from which the cookie has been obtained. In order for the attacker to obtain the cookie, first of all the server must be configured to respond to unencrypted requests, the attacker must be suitably positioned to eavesdrop on the network traffic between the client and the server *and* the user must be tricked into using unencrypted HTTP traffic. Proper audit control and separation of duties limit Integrity impact of the attack vector. Users of LedgerSMB 1.8 are urged to upgrade to known-fixed versions. Users of LedgerSMB 1.7 or 1.9 are unaffected by this vulnerability and don't need to take action. As a workaround, users may configure their Apache or Nginx reverse proxy to add the Secure attribute at the network boundary instead of relying on LedgerSMB. For Apache, please refer to the 'Header always edit' configuration command in the mod_headers module. For Nginx, please refer to the 'proxy_cookie_flags' configuration command.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-614, CWE-311
References: https://github.com/ledgersmb/ledgersmb/commit/c242f5a2abf4b99b0da205473cbba034f306bfe2; https://huntr.dev/bounties/7061d97a-98a5-495a-8ba0-3a4c66091e9d; https://ledgersmb.org/cve-2021-3882-sensitive-non-secure-cookie
CVE: CVE-2020-22724
Published: 2021-10-14
Description: A remote command execution vulnerability exists in add_server_service of PPTP_SERVER in Mercury Router MER1200 v1.0.1 and Mercury Router MER1200G v1.0.1.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78
References: https://cwe.mitre.org/data/definitions/78.html; https://github.com/DarkEyeR/CVE_Apply/blob/master/Mercury/Mercury%20MER1200%20Router%20v1.0.1%20RCE%20%20.md; https://cwe.mitre.org/data/definitions/78.html
CVE: CVE-2020-19954
Published: 2021-10-14
Description: An XML External Entity (XXE) vulnerability was discovered in /api/notify.php in S-CMS 3.0 which allows attackers to read arbitrary files.
CVSS Score: 7.5 (HIGH)
CWE: CWE-611
References: https://github.com/zhuxianjin/vuln_repo/blob/master/S-CMS%20v3.0%20XXE%20Arbitrary%20File%20Read%20Vulnerability.md; https://github.com/zhuxianjin/vuln_repo/blob/master/S-CMS%20v3.0%20XXE%20Arbitrary%20File%20Read%20Vulnerability.md
CVE: CVE-2020-19957
Published: 2021-10-14
Description: A SQL injection vulnerability has been discovered in zz cms version 2019 which allows attackers to retrieve sensitive data via the id parameter on the /dl/dl_print.php page.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: https://github.com/zhuxianjin/vuln_repo/blob/master/zzcms2019%20SQL%20injection%20vulnerability%20in%20dl_print.php.md; https://github.com/zhuxianjin/vuln_repo/blob/master/zzcms2019%20SQL%20injection%20vulnerability%20in%20dl_print.php.md
CVE: CVE-2020-19959
Published: 2021-10-14
Description: A SQL injection vulnerability has been discovered in zz cms version 2019 which allows attackers to retrieve sensitive data via the dlid parameter in the /dl/dl_sendmail.php page cookie.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: https://github.com/zhuxianjin/vuln_repo/blob/master/zzcms2019%20SQL%20injection%20vulnerability%20in%20dl_sendmail.php.md; https://github.com/zhuxianjin/vuln_repo/blob/master/zzcms2019%20SQL%20injection%20vulnerability%20in%20dl_sendmail.php.md
CVE: CVE-2020-19960
Published: 2021-10-14
Description: A SQL injection vulnerability has been discovered in zz cms version 2019 which allows attackers to retrieve sensitive data via the dlid parameter in the /dl/dl_sendsms.php page cookie.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: https://github.com/zhuxianjin/vuln_repo/blob/master/zzcms2019%20SQL%20injection%20vulnerability%20in%20dl_sendsms.php.md; https://github.com/zhuxianjin/vuln_repo/blob/master/zzcms2019%20SQL%20injection%20vulnerability%20in%20dl_sendsms.php.md
CVE: CVE-2020-19961
Published: 2021-10-14
Description: A SQL injection vulnerability has been discovered in zz cms version 2019 which allows attackers to retrieve sensitive data via the component subzs.php.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://zzcms.com; https://github.com/forget-code/zzcms; https://github.com/zhuxianjin/vuln_repo/blob/master/zzcms2019%20SQL%20injection%20vulnerability%20in%20subzs.php.md
CVE: CVE-2020-19962
Published: 2021-10-14
Description: A stored cross-site scripting (XSS) vulnerability in the getClientIp function in /lib/tinwin.class.php of Chaoji CMS 2.39, allows attackers to execute arbitrary web scripts.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/zhuxianjin/vuln_repo/blob/master/chaojicms_stored_xss.md; https://github.com/zhuxianjin/vuln_repo/blob/master/chaojicms_stored_xss.md
CVE: CVE-2020-19964
Published: 2021-10-14
Description: A Cross Site Request Forgery (CSRF) vulnerability was discovered in PHPMyWind 5.6 which allows attackers to create a new administrator account without authentication.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-352
References: http://phpmywind.com; https://github.com/gaozhifeng/PHPMyWind; https://github.com/gaozhifeng/PHPMyWind/issues/9
CVE: CVE-2021-20599
Published: 2021-10-14
Description: Cleartext Transmission of Sensitive InformationCleartext transmission of sensitive information vulnerability in MELSEC iQ-R series Safety CPU R08/16/32/120SFCPU firmware versions "26" and prior and MELSEC iQ-R series SIL2 Process CPU R08/16/32/120PSFCPU firmware versions "11" and prior allows a remote unauthenticated attacker to login to a target CPU module by obtaining credentials other than password.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-319, CWE-639
References: https://jvn.jp/vu/JVNVU98578731; https://www.cisa.gov/uscert/ics/advisories/icsa-21-287-03; https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2021-011_en.pdf
CVE: CVE-2021-22963
Published: 2021-10-14
Description: A redirect vulnerability in the fastify-static module version < 4.2.4 allows remote attackers to redirect users to arbitrary websites via a double slash // followed by a domain: http://localhost:3000//google.com/%2e%2e.The issue shows up on all the fastify-static applications that set redirect: true option. By default, it is false.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-601, CWE-601
References: https://hackerone.com/reports/1354255; https://hackerone.com/reports/1354255
CVE: CVE-2021-22964
Published: 2021-10-14
Description: A redirect vulnerability in the `fastify-static` module version >= 4.2.4 and < 4.4.1 allows remote attackers to redirect Mozilla Firefox users to arbitrary websites via a double slash `//` followed by a domain: `http://localhost:3000//a//youtube.com/%2e%2e%2f%2e%2e`.A DOS vulnerability is possible if the URL contains invalid characters `curl --path-as-is "http://localhost:3000//^/.."`The issue shows up on all the `fastify-static` applications that set `redirect: true` option. By default, it is `false`.
CVSS Score: 8.8 (HIGH)
CWE: CWE-400, CWE-601
References: https://hackerone.com/reports/1361804; https://hackerone.com/reports/1361804
CVE: CVE-2021-33177
Published: 2021-10-14
Description: The Bulk Modifications functionality in Nagios XI versions prior to 5.8.5 is vulnerable to SQL injection. Exploitation requires the malicious actor to be authenticated to the vulnerable system, but once authenticated they would be able to execute arbitrary sql queries.
CVSS Score: 8.8 (HIGH)
CWE: CWE-89, CWE-89
References: https://www.synopsys.com/blogs/software-security/cyrc-advisory-nagios-xi; https://www.synopsys.com/blogs/software-security/cyrc-advisory-nagios-xi
CVE: CVE-2021-33178
Published: 2021-10-14
Description: The Manage Backgrounds functionality within NagVis versions prior to 1.9.29 is vulnerable to an authenticated path traversal vulnerability. Exploitation of this results in a malicious actor having the ability to arbitrarily delete files on the local system.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-22, CWE-22
References: https://nagvis.org/downloads/changelog/1.9.29; https://www.synopsys.com/blogs/software-security/cyrc-advisory-nagios-xi; https://lists.debian.org/debian-lts-announce/2025/05/msg00000.html
CVE: CVE-2021-33179
Published: 2021-10-14
Description: The general user interface in Nagios XI versions prior to 5.8.4 is vulnerable to authenticated reflected cross-site scripting. An authenticated victim, who accesses a specially crafted malicious URL, would unknowingly execute the attached payload.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://www.synopsys.com/blogs/software-security/cyrc-advisory-nagios-xi; https://www.synopsys.com/blogs/software-security/cyrc-advisory-nagios-xi
CVE: CVE-2021-37933
Published: 2021-10-14
Description: An LDAP injection vulnerability in /account/login in Huntflow Enterprise before 3.10.6 could allow an unauthenticated, remote user to modify the logic of an LDAP query and bypass authentication. The vulnerability is due to insufficient server-side validation of the email parameter before using it to construct LDAP queries. An attacker could bypass authentication exploiting this vulnerability by sending login attempts in which there is a valid password but a wildcard character in email parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-74
References: https://gist.github.com/andrey-lomtev/cbf12bc8d8763996cf8d6d1641a0b049; https://gist.github.com/andrey-lomtev/cbf12bc8d8763996cf8d6d1641a0b049
CVE: CVE-2021-38344
Published: 2021-10-14
Description: The Brizy Page Builder plugin <= 2.3.11 for WordPress was vulnerable to stored XSS by lower-privileged users such as a subscribers. It was possible to add malicious JavaScript to a page by modifying the request sent to update the page via the brizy_update_item AJAX action and adding JavaScript to the data parameter, which would be executed in the session of any visitor viewing or previewing the post or page.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-79
References: https://www.wordfence.com/blog/2021/10/multiple-vulnerabilities-in-brizy-page-builder-plugin-allow-site-takeover/; https://www.wordfence.com/blog/2021/10/multiple-vulnerabilities-in-brizy-page-builder-plugin-allow-site-takeover/
CVE: CVE-2021-38345
Published: 2021-10-14
Description: The Brizy Page Builder plugin <= 2.3.11 for WordPress used an incorrect authorization check that allowed any logged-in user accessing any endpoint in the wp-admin directory to modify the content of any existing post or page created with the Brizy editor. An identical issue was found by another researcher in Brizy <= 1.0.125 and fixed in version 1.0.126, but the vulnerability was reintroduced in version 1.0.127.
CVSS Score: 7.1 (HIGH)
CWE: CWE-79, CWE-863
References: https://www.wordfence.com/blog/2021/10/multiple-vulnerabilities-in-brizy-page-builder-plugin-allow-site-takeover/; https://www.wordfence.com/blog/2021/10/multiple-vulnerabilities-in-brizy-page-builder-plugin-allow-site-takeover/
CVE: CVE-2021-38346
Published: 2021-10-14
Description: The Brizy Page Builder plugin <= 2.3.11 for WordPress allowed authenticated users to upload executable files to a location of their choice using the brizy_create_block_screenshot AJAX action. The file would be named using the id parameter, which could be prepended with "../" to perform directory traversal, and the file contents were populated via the ibsf parameter, which would be base64-decoded and written to the file. While the plugin added a .jpg extension to all uploaded filenames, a double extension attack was still possible, e.g. a file named shell.php would be saved as shell.php.jpg, and would be executable on a number of common configurations.
CVSS Score: 8.8 (HIGH)
CWE: CWE-79, CWE-22, CWE-434
References: https://www.wordfence.com/blog/2021/10/multiple-vulnerabilities-in-brizy-page-builder-plugin-allow-site-takeover/; https://www.wordfence.com/blog/2021/10/multiple-vulnerabilities-in-brizy-page-builder-plugin-allow-site-takeover/
CVE: CVE-2021-39330
Published: 2021-10-14
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2021-24608. Reason: This candidate is a duplicate of CVE-2021-24608. Notes: All CVE users should reference CVE-2021-24608 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage
CVE: CVE-2021-41132
Published: 2021-10-14
Description: OMERO.web provides a web based client and plugin infrastructure. In versions prior to 5.11.0, a variety of templates do not perform proper sanitization through HTML escaping. Due to the lack of sanitization and use of ``jQuery.html()``, there are a whole host of cross-site scripting possibilities with specially crafted input to a variety of fields. This issue is patched in version 5.11.0. There are no known workarounds aside from upgrading.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-116, CWE-79
References: https://github.com/ome/omero-web/commit/0168067accde5e635341b3c714b1d53ae92ba424; https://github.com/ome/omero-web/security/advisories/GHSA-g67g-hvc3-xmvf; https://www.openmicroscopy.org/security/advisories/2021-SV3/
CVE: CVE-2021-41142
Published: 2021-10-14
Description: Tuleap Open ALM is a libre and open source tool for end to end traceability of application and system developments. There is a cross-site scripting vulnerability in Tuleap Community Edition prior to 12.11.99.25 and Tuleap Enterprise Edition 12.11-2. A malicious user with the capability to add and remove attachment to an artifact could force a victim to execute uncontrolled code. Tuleap Community Edition 11.17.99.146 and Tuleap Enterprise Edition 12.11-2 contain a fix for the issue.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://github.com/Enalean/tuleap/commit/d6c837ed6fa66d319175954a42f93d4d86745208; https://github.com/Enalean/tuleap/security/advisories/GHSA-p3j6-6h9h-34r5; https://tuleap.net/plugins/git/tuleap/tuleap/stable?a=commit&h=d6c837ed6fa66d319175954a42f93d4d86745208
CVE: CVE-2021-32569
Published: 2021-10-14
Description: In OSS-RC systems of the release 18B and older customer documentation browsing libraries under ALEX are subject to Cross-Site Scripting. This problem is completely resolved in new Ericsson library browsing tool ELEX used in systems like Ericsson Network Manager. NOTE: This vulnerability only affects products that are no longer supported by the maintainer. Ericsson Network Manager is a new generation OSS system which OSS-RC customers shall upgrade to
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://www.gruppotim.it/it/innovazione/servizi-digitali/cybersecurity/red-team.html; https://www.gruppotim.it/it/innovazione/servizi-digitali/cybersecurity/red-team.html
CVE: CVE-2021-42227
Published: 2021-10-14
Description: Cross SIte Scripting (XSS) vulnerability exists in KindEditor 4.1.x via a Google search inurl:/examples/uploadbutton.html and then the .html file on the website that uses this editor (the file suffix is allowed).
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/kindsoft/kindeditor/issues/336; https://github.com/kindsoft/kindeditor/issues/336
CVE: CVE-2021-42228
Published: 2021-10-14
Description: A Cross Site Request Forgery (CSRF) vulnerability exists in KindEditor 4.1.x, as demonstrated by examples/uploadbutton.html.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://github.com/kindsoft/kindeditor/issues/337; https://github.com/kindsoft/kindeditor/issues/337
CVE: CVE-2021-32571
Published: 2021-10-14
Description: In OSS-RC systems of the release 18B and older during data migration procedures certain files containing usernames and passwords are left in the system undeleted but in folders accessible by top privileged accounts only. NOTE: This vulnerability only affects products that are no longer supported by the maintainer. Ericsson Network Manager is a new generation OSS system which OSS-RC customers shall upgrade to
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-459
References: https://www.gruppotim.it/it/innovazione/servizi-digitali/cybersecurity/red-team.html; https://www.gruppotim.it/it/innovazione/servizi-digitali/cybersecurity/red-team.html
CVE: CVE-2021-42369
Published: 2021-10-14
Description: Imagicle Application Suite (for Cisco UC) before 2021.Summer.2 allows SQL injection. A low-privileged user could inject a SQL statement through the "Export to CSV" feature of the Contact Manager web GUI.
CVSS Score: 9.9 (CRITICAL)
CWE: CWE-89
References: https://github.com/dawid-czarnecki/public-vulnerabilities/tree/master/Imagicle/CVE; https://www.imagicle.com/en/resources/download/; https://zigrin.com/advisories/imagicle-sql-injection-vulnerability-in-contacts-csv-export/
CVE: CVE-2021-36387
Published: 2021-10-14
Description: In Yellowfin before 9.6.1 there is a Stored Cross-Site Scripting vulnerability in the video embed functionality exploitable through a specially crafted HTTP POST request to the page "ActivityStreamAjax.i4".
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-639
References: http://packetstormsecurity.com/files/164515/Yellowfin-Cross-Site-Scripting-Insecure-Direct-Object-Reference.html; http://seclists.org/fulldisclosure/2021/Oct/15; https://cyberaz0r.info/2021/10/yellowfin-multiple-vulnerabilities/
CVE: CVE-2021-36388
Published: 2021-10-14
Description: In Yellowfin before 9.6.1 it is possible to enumerate and download users profile pictures through an Insecure Direct Object Reference vulnerability exploitable by sending a specially crafted HTTP GET request to the page "MIIAvatarImage.i4".
CVSS Score: 7.5 (HIGH)
CWE: CWE-639
References: http://seclists.org/fulldisclosure/2021/Oct/15; https://cyberaz0r.info/2021/10/yellowfin-multiple-vulnerabilities/; https://github.com/cyberaz0r/Yellowfin-Multiple-Vulnerabilities/blob/main/README.md
CVE: CVE-2021-36389
Published: 2021-10-14
Description: In Yellowfin before 9.6.1 it is possible to enumerate and download uploaded images through an Insecure Direct Object Reference vulnerability exploitable by sending a specially crafted HTTP GET request to the page "MIImage.i4".
CVSS Score: 7.5 (HIGH)
CWE: CWE-639
References: http://packetstormsecurity.com/files/164515/Yellowfin-Cross-Site-Scripting-Insecure-Direct-Object-Reference.html; http://seclists.org/fulldisclosure/2021/Oct/15; https://cyberaz0r.info/2021/10/yellowfin-multiple-vulnerabilities/
CVE: CVE-2021-38295
Published: 2021-10-14
Description: In Apache CouchDB, a malicious user with permission to create documents in a database is able to attach a HTML attachment to a document. If a CouchDB admin opens that attachment in a browser, e.g. via the CouchDB admin interface Fauxton, any JavaScript code embedded in that HTML attachment will be executed within the security context of that admin. A similar route is available with the already deprecated _show and _list functionality. This privilege escalation vulnerability allows an attacker to add or remove data in any database or make configuration changes. This issue affected Apache CouchDB prior to 3.1.2
CVSS Score: 7.3 (HIGH)
CWE: CWE-79
References: https://docs.couchdb.org/en/stable/cve/2021-38295.html; https://docs.couchdb.org/en/stable/cve/2021-38295.html
CVE: CVE-2021-42340
Published: 2021-10-14
Description: The fix for bug 63362 present in Apache Tomcat 10.1.0-M1 to 10.1.0-M5, 10.0.0-M1 to 10.0.11, 9.0.40 to 9.0.53 and 8.5.60 to 8.5.71 introduced a memory leak. The object introduced to collect metrics for HTTP upgrade connections was not released for WebSocket connections once the connection was closed. This created a memory leak that, over time, could lead to a denial of service via an OutOfMemoryError.
CVSS Score: 7.5 (HIGH)
CWE: CWE-772, CWE-772
References: https://kc.mcafee.com/corporate/index?page=content&id=SB10379; https://lists.apache.org/thread.html/r8097a2d1550aa78e585fc77e602b9046e6d4099d8d132497c5387784%40%3Ccommits.myfaces.apache.org%3E; https://lists.apache.org/thread.html/r83a35be60f06aca2065f188ee542b9099695d57ced2e70e0885f905c%40%3Cannounce.tomcat.apache.org%3E
CVE: CVE-2021-40999
Published: 2021-10-15
Description: A remote arbitrary command execution vulnerability was discovered in Aruba ClearPass Policy Manager version(s): ClearPass Policy Manager 6.10.x prior to 6.10.2 - - ClearPass Policy Manager 6.9.x prior to 6.9.7-HF1 - - ClearPass Policy Manager 6.8.x prior to 6.8.9-HF1. Aruba has released patches for ClearPass Policy Manager that address this security vulnerability.
CVSS Score: 7.2 (HIGH)
CWE: CWE-77
References: https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2021-018.txt; https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2021-018.txt
CVE: CVE-2021-42329
Published: 2021-10-15
Description: The “List_Add” function of message board of ShinHer StudyOnline System does not filter special characters in the title parameter. After logging in with user’s privilege, remote attackers can inject JavaScript and execute stored XSS attacks.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://www.twcert.org.tw/tw/cp-132-5199-61238-1.html; https://www.twcert.org.tw/tw/cp-132-5199-61238-1.html
CVE: CVE-2021-42330
Published: 2021-10-15
Description: The “Teacher Edit” function of ShinHer StudyOnline System does not perform authority control. After logging in with user’s privilege, remote attackers can access and edit other users’ credential and personal information by crafting URL parameters.
CVSS Score: 8.8 (HIGH)
CWE: CWE-285
References: https://www.twcert.org.tw/tw/cp-132-5200-3d3ca-1.html; https://www.twcert.org.tw/tw/cp-132-5200-3d3ca-1.html
CVE: CVE-2021-42331
Published: 2021-10-15
Description: The “Study Edit” function of ShinHer StudyOnline System does not perform permission control. After logging in with user’s privilege, remote attackers can access and edit other users’ tutorial schedule by crafting URL parameters.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-285, CWE-862
References: https://www.twcert.org.tw/tw/cp-132-5201-dc534-1.html; https://www.twcert.org.tw/tw/cp-132-5201-dc534-1.html
CVE: CVE-2021-42332
Published: 2021-10-15
Description: The “List View” function of ShinHer StudyOnline System is not under authority control. After logging in with user’s privilege, remote attackers can access the content of other users’ message boards by crafting URL parameters.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-285
References: https://www.twcert.org.tw/tw/cp-132-5202-49681-1.html; https://www.twcert.org.tw/tw/cp-132-5202-49681-1.html
CVE: CVE-2021-42333
Published: 2021-10-15
Description: The Easytest contains SQL injection vulnerabilities. After obtaining user’s privilege, remote attackers can inject SQL commands into the parameters of the learning history page to access all database and obtain administrator permissions.
CVSS Score: 8.8 (HIGH)
CWE: CWE-89
References: https://www.twcert.org.tw/tw/cp-132-5203-00de8-1.html; https://www.twcert.org.tw/tw/cp-132-5203-00de8-1.html
CVE: CVE-2021-42334
Published: 2021-10-15
Description: The Easytest contains SQL injection vulnerabilities. After obtaining a user’s privilege, remote attackers can inject SQL commands into the parameters of the elective course management page to obtain all database and administrator permissions.
CVSS Score: 8.8 (HIGH)
CWE: CWE-89, CWE-89
References: https://www.twcert.org.tw/tw/cp-132-5204-f80ad-1.html; https://www.twcert.org.tw/tw/cp-132-5204-f80ad-1.html
CVE: CVE-2021-42335
Published: 2021-10-15
Description: Easytest bulletin board management function of online learning platform does not filter special characters. After obtaining a user’s privilege, remote attackers can inject JavaScript and execute stored XSS attack.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://www.twcert.org.tw/tw/cp-132-5206-3cd3f-1.html; https://www.twcert.org.tw/tw/cp-132-5206-3cd3f-1.html