Stud.IP versions 1.3.0-2 and below are susceptible to multiple remote file inclusion vulnerabilities.