https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2024-7871.htmlhttps://patchthecve.com/cve/CVE-2024-7871.htmlWed, 17 Jun 2026 08:21:05 +0000HIGH 8.8: SQL Injection in online dictionary function of Easytest Online Test Platform ver.24E01 and earlier allow remote authenticated users to execute arbitrary SQL commands via the word parameter.https://patchthecve.com/cve/CVE-2024-43776.htmlhttps://patchthecve.com/cve/CVE-2024-43776.htmlWed, 17 Jun 2026 07:51:41 +0000HIGH 8.8: SQL Injection in mock exam function of Easytest Online Test Platform ver.24E01 and earlier allow remote authenticated users to execute arbitrary SQL commands via the qlevel parameter.https://patchthecve.com/cve/CVE-2024-43775.htmlhttps://patchthecve.com/cve/CVE-2024-43775.htmlWed, 17 Jun 2026 07:51:41 +0000HIGH 8.8: SQL Injection in search course titles function of Easytest Online Test Platform ver.24E01 and earlier allow remote authenticated users to execute arbitrary SQL commands via the search parameter.https://patchthecve.com/cve/CVE-2024-43774.htmlhttps://patchthecve.com/cve/CVE-2024-43774.htmlWed, 17 Jun 2026 07:51:41 +0000HIGH 8.8: SQL Injection in download personal learning course function of Easytest Online Test Platform ver.24E01 and earlier allow remote authenticated users to execute arbitrary SQL commands via the uid parameter.https://patchthecve.com/cve/CVE-2024-43773.htmlhttps://patchthecve.com/cve/CVE-2024-43773.htmlWed, 17 Jun 2026 07:51:41 +0000CRITICAL 9.8: SQL Injection in download class learning course function of Easytest Online Test Platform ver.24E01 and earlier allow remote attackers to execute arbitrary SQL commands via the cstr parameter.https://patchthecve.com/cve/CVE-2024-43772.htmlhttps://patchthecve.com/cve/CVE-2024-43772.htmlWed, 17 Jun 2026 07:51:41 +0000CRITICAL 9.8: SQL Injection in download student learning course function of Easytest Online Test Platform ver.24E01 and earlier allow remote attackers to execute arbitrary SQL commands via the uid parameter.