Easy test Online Learning and Testing Platform from HWA JIUH DIGITAL TECHNOLOGY does not properly validate a specific page parameter, allowing remote attackers with regular privilege to inject arbitrary JavaScript code and perform Reflected Cross-site scripting attacks.
References
| Link | Resource |
|---|---|
| https://www.twcert.org.tw/en/cp-139-8033-0a98f-2.html | Vendor Advisory |
| https://www.twcert.org.tw/tw/cp-132-8028-360e1-1.html | Vendor Advisory |
Configurations
Configuration 1 (hide)
|
History
04 Sep 2024, 17:11
| Type | Values Removed | Values Added |
|---|---|---|
| Summary |
|
|
| CPE | cpe:2.3:a:easy_test_online_learning_and_testing_platform_project:easy_test_online_learning_and_testing_platform:*:*:*:*:*:*:*:* | |
| References | () https://www.twcert.org.tw/en/cp-139-8033-0a98f-2.html - Vendor Advisory | |
| References | () https://www.twcert.org.tw/tw/cp-132-8028-360e1-1.html - Vendor Advisory | |
| First Time |
Easy Test Online Learning And Testing Platform Project easy Test Online Learning And Testing Platform
Easy Test Online Learning And Testing Platform Project |
30 Aug 2024, 03:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2024-08-30 03:15
Updated : 2024-09-04 17:11
NVD link : CVE-2024-8328
Mitre link : CVE-2024-8328
CVE.ORG link : CVE-2024-8328
JSON object : View
Products Affected
easy_test_online_learning_and_testing_platform_project
- easy_test_online_learning_and_testing_platform
CWE
CWE-79
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')