CVE Catalog
CVE-2026-51346
CriticalCVSS 9.1Summary
SQL Injection vulnerability in StudIP 6.0.x before 6.0.3 and 5.4.x before 5.4.12 allows a remote attacker to execute arbitrary code and obtain sensitive information via the store() functions.
Risk Assessment
An attacker could execute arbitrary code and access sensitive data, potentially leading to system compromise.
Recommendation
Upgrade StudIP to version 6.0.3 or 5.4.12 (or later) depending on your release line.
Original NVD description (English source)
SQL Injection vulnerability in StudIP 6.0.x before 6.0.3 and 5.4.x before 5.4.12 allows a remote attacker to execute arbitrary code and obtain sensitive information via the store() functions.