Main
Vulnerability Database
Exploits
ID:7788 - Exploit for Security features bypass in MasterStudy LMS - CVE-2022-0441
ID:7788 - Exploit for Security features bypass in MasterStudy LMS - CVE-2022-0441
Published: May 12, 2022
Vulnerability identifier: #VU60757
Vulnerability risk: High
CVE-ID: CVE-2022-0441
CWE-ID: CWE-254
Exploitation vector: Remote access
Vulnerable software:
MasterStudy LMS
MasterStudy LMS
Link to public exploit:
Vulnerability description
The vulnerability allows a remote attacker to bypass security restrictions.
The vulnerability exists due to a security bypass issue in the admin-ajax.php script. A remote user can send a specially crafted request and make a new administrative account.
Remediation
Install updates from vendor's website.