66 matches found
CVE-2025-26199
🛡️ CVE-2025-26199 — Trasmissione non sicura di password in chiaro in CloudClassroom-PHP-Project v1.0 📄 Descrizione CloudClassroom-PHP-Project v1.0 è vulnerabile alla trasmissione non sicura delle credenziali utente. Durante il processo di autenticazione, le password vengono inviate tramite HTTP no...
CVE-2025-46178
CVE-2025-46178 Una vulnerabilità di Cross-Site Scripting XSS esiste in askquery.php tramite il parametro eid nel progetto CloudClassroom PHP. Ciò consente a un attaccante remoto di iniettare JavaScript arbitrario nel contesto della sessione del browser di una vittima inviando un URL appositamente...
CVE-2025-26198
CVE-2025-26198 - Demonstração de Injeção SQL Projeto acadêmico ENSIMAG - Segurança 3A Autores: Wail Yacoubi, Mohammed-Yassine Akhmari Data: Janeiro de 2026 Aviso Este código é intencionalmente vulnerável para fins educativos. Nunca implantar em produção. Descrição Reprodução da CVE-2025-26198:...
CVE-2025-44608
CVE-2025-44608 CloudClassroom-PHP Project v1.0 ist anfällig für RCE via SQL-Injection. Anbieter: https://github.com/mathurvishal/CloudClassroom-PHP-Project Software-Link: https://github.com/mathurvishal/CloudClassroom-PHP-Project/archive/refs/heads/master.zip PoC Schritt 1: Navigieren Sie zur...
CVE-2025-50866
CloudClassroom-PHP-Project 1.0 contiene una vulnerabilità di Cross-site Scripting XSS riflesso nel parametro email dell'endpoint postquerypublic. Una sanificazione impropria permette a un attaccante di iniettare codice JavaScript arbitrario che viene eseguito nel contesto del browser dell'utente,...
CVE-2025-26198
🛡️ Divulgazione CVE: CVE-2025-26198 — SQL Injection in CloudClassroom-PHP-Project Data di divulgazione: 18 giugno 2025 ID CVE: CVE-2025-26198 Gravità: CRITICAL CVSS 9.8 🧩 Riepilogo Una vulnerabilità critica di SQL Injection esiste in CloudClassroom-PHP-Project v1.0, in particolare nell'endpoint...
CVE-2025-50867
Existe uma vulnerabilidade de injeção SQL no endpoint takeassessment2.php do CloudClassroom-PHP-Project 1.0, onde o parâmetro POST Q5 é incorporado diretamente em instruções SQL sem sanitização. Tipo de Vulnerabilidade : SQL Injection Fornecedor do Produto :...
CVE-2026-2058
The CVE-2026-2058 entry affects mathurvishal CloudClassroom-PHP-Project (Post Query Details Page, postquerypublic.php). A SQL injection arises from unsafely handling the gnamex parameter in the Post Query functionality, allowing remote attackers to inject SQL via POST requests to /postquerypublic...
EUVD-2025-23284
Malicious code in bioql PyPI...
EUVD-2025-23370
Malicious code in bioql PyPI...
EUVD-2025-22708
Malicious code in bioql PyPI...
EUVD-2025-5286
Malicious code in bioql PyPI...
EUVD-2025-18756
Malicious code in bioql PyPI...
EUVD-2025-16669
Malicious code in bioql PyPI...
CVE-2025-50868
A SQL Injection vulnerability exists in the takeassessment2.php file of CloudClassroom-PHP-Project 1.0. The Q4 POST parameter is not properly sanitized before being used in SQL queries...
CVE-2025-50866
CloudClassroom-PHP-Project 1.0 contains a reflected Cross-site Scripting XSS vulnerability in the email parameter of the postquerypublic endpoint. Improper sanitization allows an attacker to inject arbitrary JavaScript code that executes in the context of the user s browser, potentially leading t...
CVE-2025-50868
A SQL Injection vulnerability exists in the takeassessment2.php file of CloudClassroom-PHP-Project 1.0. The Q4 POST parameter is not properly sanitized before being used in SQL queries...
PT-2025-31658 · Unknown · Cloudclassroom-Php Project
Name of the Vulnerable Software and Affected Versions: CloudClassroom-PHP-Project version 1.0 Description: A SQL Injection issue exists in the takeassessment2.php file. The Q4 POST parameter is not properly sanitized before being used in SQL queries. Recommendations: Ensure proper sanitization of...
CVE-2025-50868
A SQL Injection vulnerability exists in the takeassessment2.php file of CloudClassroom-PHP-Project 1.0. The Q4 POST parameter is not properly sanitized before being used in SQL queries...
CVE-2025-50868
CVE-2025-50868 affects CloudClassroom-PHP-Project 1.0, specifically the takeassessment2.php file where the Q4 POST parameter is not properly sanitized before being used in SQL queries, enabling SQL injection. The CVSS v3.1 base score is 6.5 (Medium) with low confidentiality/integrity impact and n...