8.5
Élevée
CVE-2026-42730 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Stylemix…
Description
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Stylemix MasterStudy LMS masterstudy-lms-learning-management-system allows Blind SQL Injection.This issue affects MasterStudy LMS: from n/a through <= 3.7.29.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| MasterStudy LMS 3.7 | premières → 3.7.29 | Pas de correctif indiqué |
Autres CVE de MasterStudy LMS
Les 15 CVE de MasterStudy LMS →
CVE-2026-118090
Subscriber PHP Object Injection in MasterStudy LMS <= 3.7.55 versions
8.8
Élevée
CVE-2026-78284
Unauthenticated Arbitrary File Deletion in MasterStudy LMS <= 3.7.42 versions
8.6
Élevée
CVE-2026-73404
Subscriber Broken Access Control in MasterStudy LMS <= 3.7.41 versions
6.5
Moyenne
CVE-2026-68568
Subscriber Privilege Escalation in MasterStudy LMS <= 3.7.41 versions
6.3
Moyenne