Cve on Simon Hilchenbachhttps://simon.hilchenba.ch/tags/cve/Recent content in Cve on Simon HilchenbachHugoen-usMon, 17 Aug 2026 00:00:00 +0000CVE-2026-51346: Multiple SQL injection vulnerabilities in Stud.IPhttps://simon.hilchenba.ch/blog/studip-sql-injection/Mon, 17 Aug 2026 00:00:00 +0000https://simon.hilchenba.ch/blog/studip-sql-injection/Multiple SQL injection vulnerabilities were found in Stud.IP, a learning management system used by many German universities. An authenticated attacker with a lecturer or admin role can exfiltrate the entire database, including password hashes, private messages, and student grades.