67 matches found
CVE-2025-50866
CloudClassroom-PHP-Project 1.0 在 postquerypublic 端点的 email 参数中存在反射型跨站脚本（XSS）漏洞。不充分的清理机制允许攻击者注入任意 JavaScript 代码，该代码在用户浏览器上下文中执行，可能导致会话劫持或钓鱼攻击。 漏洞类型 : 跨站脚本（XSS） 产品供应商 : https://github.com/mathurvishal/CloudClassroom-PHP-Project 受影响产品代码库 : https://github.com/mathurvishal/CloudClassroom-PHP-Project 1...
CVE-2025-50867
在CloudClassroom-PHP-Project 1.0的takeassessment2.php端点中存在SQL注入漏洞，Q5 POST参数未经清理直接嵌入SQL语句中。 漏洞类型 : SQL注入 产品供应商 : https://github.com/mathurvishal/CloudClassroom-PHP-Project 受影响产品代码库 : https://github.com/mathurvishal/CloudClassroom-PHP-Project 1.0 -...
CVE-2025-46178
CVE-2025-46178 在CloudClassroom PHP项目的askquery.php中，通过eid参数存在跨站脚本（XSS）漏洞。远程攻击者可通过发送精心构造的URL，在受害者浏览器会话上下文中注入任意JavaScript，导致会话劫持或页面篡改。 补充信息 该payload使用alert9734函数演示了成功执行JavaScript。输入在渲染前未进行适当的清理或编码，导致应用程序暴露于反射型XSS。 为缓解此问题： 使用服务端输入验证 正确编码输出（特别是HTML上下文） 考虑使用安全库如OWASP ESAPI或具有内置XSS保护的框架 漏洞类型 跨站脚本（XSS）...
CVE-2025-44608
CVE-2025-44608 El proyecto CloudClassroom-PHP v1.0 es vulnerable a RCE mediante inyección SQL. Proveedor: https://github.com/mathurvishal/CloudClassroom-PHP-Project Enlace del software: https://github.com/mathurvishal/CloudClassroom-PHP-Project/archive/refs/heads/master.zip PoC Paso 1: Navegue a ...
CVE-2025-26198
CVE-2025-26198 - SQL注入演示 ENSIMAG学术项目 - 3A安全 作者：Wail Yacoubi, Mohammed-Yassine Akhmari 日期：2026年1月 警告 此代码有意包含漏洞，仅供教育用途。 切勿部署到生产环境。 描述 复现CVE-2025-26198：CloudClassroom-PHP-Project v1.0中的严重SQL注入漏洞。 CVE特征： 标识符：CVE-2025-26198 CVSS评分：9.8/10（严重） 类型：SQL注入（CWE-89） 受漏洞组件：loginlinkadmin.php 影响：认证绕过 + 完全数据库提取...
CVE-2025-26198
🛡️ CVE Disclosure: CVE-2025-26198 — SQL Injection in CloudClassroom-PHP-Project Disclosure Date: 18 June 2025 CVE ID: CVE-2025-26198 Severity: CRITICAL CVSS 9.8 🧩 Summary A critical SQL Injection vulnerability exists in CloudClassroom-PHP-Project v1.0, specifically within the loginlinkadmin.php...
CVE-2025-26199
🛡️ CVE-2025-26199 — Transmisión Insegura de Contraseñas en Texto Claro en CloudClassroom-PHP-Project v1.0 📄 Descripción CloudClassroom-PHP-Project v1.0 es vulnerable a la transmisión insegura de credenciales de usuario. Durante el proceso de autenticación, las contraseñas se envían a través de HTT...
CVE-2026-2058-PoC
CVE-2026-2058-PoC – Injeção SQL no Projeto PHP CloudClassroom Visão Geral Existe uma vulnerabilidade de Injeção SQL na funcionalidade Post Query do Projeto PHP CloudClassroom v1.0. A vulnerabilidade permite que atacantes injetem comandos SQL arbitrários por meio do parâmetro POSTsqueryx, levando ...
CVE-2026-2058
The CVE-2026-2058 entry affects mathurvishal CloudClassroom-PHP-Project (Post Query Details Page, postquerypublic.php). A SQL injection arises from unsafely handling the gnamex parameter in the Post Query functionality, allowing remote attackers to inject SQL via POST requests to /postquerypublic...
EUVD-2025-23370
Malicious code in bioql PyPI...
EUVD-2025-22708
Malicious code in bioql PyPI...
EUVD-2025-5286
Malicious code in bioql PyPI...
EUVD-2025-23284
Malicious code in bioql PyPI...
EUVD-2025-18756
Malicious code in bioql PyPI...
EUVD-2025-16669
Malicious code in bioql PyPI...
CVE-2025-50868
A SQL Injection vulnerability exists in the takeassessment2.php file of CloudClassroom-PHP-Project 1.0. The Q4 POST parameter is not properly sanitized before being used in SQL queries...
CVE-2025-50866
CloudClassroom-PHP-Project 1.0 contains a reflected Cross-site Scripting XSS vulnerability in the email parameter of the postquerypublic endpoint. Improper sanitization allows an attacker to inject arbitrary JavaScript code that executes in the context of the user s browser, potentially leading t...
CVE-2025-50868
A SQL Injection vulnerability exists in the takeassessment2.php file of CloudClassroom-PHP-Project 1.0. The Q4 POST parameter is not properly sanitized before being used in SQL queries...
PT-2025-31658 · Unknown · Cloudclassroom-Php Project
Name of the Vulnerable Software and Affected Versions: CloudClassroom-PHP-Project version 1.0 Description: A SQL Injection issue exists in the takeassessment2.php file. The Q4 POST parameter is not properly sanitized before being used in SQL queries. Recommendations: Ensure proper sanitization of...
CVE-2025-50868
CVE-2025-50868 affects CloudClassroom-PHP-Project 1.0, specifically the takeassessment2.php file where the Q4 POST parameter is not properly sanitized before being used in SQL queries, enabling SQL injection. The CVSS v3.1 base score is 6.5 (Medium) with low confidentiality/integrity impact and n...