7.6
High
CVE-2025-64366 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Stylemix…
Description
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Stylemix MasterStudy LMS masterstudy-lms-learning-management-system allows Blind SQL Injection.This issue affects MasterStudy LMS: from n/a through <= 3.6.27.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| MasterStudy LMS 3.6 | earliest → 3.6.27 | No fix stated |
Other CVEs of MasterStudy LMS
The 15 CVEs of MasterStudy LMS →
CVE-2026-118090
Subscriber PHP Object Injection in MasterStudy LMS <= 3.7.55 versions
8.8
High
CVE-2026-78284
Unauthenticated Arbitrary File Deletion in MasterStudy LMS <= 3.7.42 versions
8.6
High
CVE-2026-73404
Subscriber Broken Access Control in MasterStudy LMS <= 3.7.41 versions
6.5
Medium
CVE-2026-68568
Subscriber Privilege Escalation in MasterStudy LMS <= 3.7.41 versions
6.3
Medium