masterstudy_lms 漏洞

严重CVE-2024-31362024/04/09

MasterStudy LMS <= 3.3.3 - Unauthenticated Local File Inclusion via template

The MasterStudy LMS plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 3.3.3 via the 'template' parameter. This makes it possible for unauthenticated attackers to include and execute arbitrary files on the server, allowing the execution of any PHP code in those files. This can be used to bypass access controls, obtain sensitive data, or achieve code execution in cases where images and other "safe" file types can be uploaded and included.

masterstudy_lmsPoC 已收录RCE

CVSS9.8EPSS 45.1%

严重CVE-2024-15122024/02/17

MasterStudy LMS WordPress Plugin <= 3.2.5 - SQL Injection

The MasterStudy LMS WordPress Plugin for Online Courses and Education plugin for WordPress is vulnerable to union based SQL Injection via the 'user' parameter of the /lms/stm-lms/order/items REST route in all versions up to, and including, 3.2.5 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for unauthenticated attackers to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.

masterstudy_lmsPoC 已收录RCE

CVSS9.8EPSS 93.9%

严重CVE-2022-04412022/03/07

MasterStudy LMS <2.7.6 - Improper Access Control

WordPress MasterStudy LMS plugin before 2.7.6 is susceptible to improper access control. The plugin does not validate some parameters given when registering a new account, which can allow an attacker to register as an admin, thus potentially being able to obtain sensitive information, modify data, and/or execute unauthorized operations.

masterstudy_lmsPoC 已收录

CVSS9.8EPSS 88.1%

masterstudy_lms

关联漏洞

MasterStudy LMS <= 3.3.3 - Unauthenticated Local File Inclusion via template

MasterStudy LMS WordPress Plugin <= 3.2.5 - SQL Injection

MasterStudy LMS <2.7.6 - Improper Access Control