Cve

Multiple SQL injection vulnerabilities were found in Stud.IP, a learning management system used by many German universities. An authenticated attacker with a lecturer or admin role can exfiltrate the entire database, including password hashes, private messages, and student grades.