Lucene search
+L

229 matches found

Positive Technologies
Positive Technologies
•added 2025/06/02 12:00 a.m.•17 views

PT-2025-23532 · Unknown · Cloudclassroom-Php Project

Name of the Vulnerable Software and Affected Versions: CloudClassroom-PHP-Project version 1.0 Description: A SQL injection vulnerability exists in the registrationform endpoint of CloudClassroom-PHP-Project due to improper input validation, allowing attackers to inject SQL queries. The pass...

7.3CVSS6AI score0.01135EPSS
SaveExploits3References12
Vulnrichment
Vulnrichment
•added 2025/06/02 12:00 a.m.•4 views

CVE-2025-45542

SQL injection vulnerability in the registrationform endpoint of CloudClassroom-PHP-Project v1.0. The pass parameter is vulnerable due to improper input validation, allowing attackers to inject SQL queries...

5.9AI score0.01135EPSS
SaveExploits3References2
CVE
CVE
•added 2025/06/02 12:00 a.m.•85 views

CVE-2025-45542

The CloudClassroom-PHP-Project v1.0 is vulnerable to a time-based blind remote SQL injection in its registrationform endpoint. The root cause is the improper sanitization and validation of the pass parameter, which allows an unauthenticated remote attacker to manipulate backend SQL logic, potenti...

7.3CVSS5.9AI score0.01135EPSS
SaveExploits3References3Affected Software1
Cvelist
Cvelist
•added 2025/06/02 12:00 a.m.•32 views

CVE-2025-45542

SQL injection vulnerability in the registrationform endpoint of CloudClassroom-PHP-Project v1.0. The pass parameter is vulnerable due to improper input validation, allowing attackers to inject SQL queries...

0.01135EPSS
SaveExploits3References2
Positive Technologies
Positive Technologies
•added 2025/06/02 12:00 a.m.•17 views

PT-2025-23534 · Unknown · Cloudclassroom-Php Project

Name of the Vulnerable Software and Affected Versions: CloudClassroom PHP Project version 1.0 Description: A time-based SQL injection issue exists due to improper validation of user input in the myds parameter of the mydetailsstudent.php file. This allows an attacker to inject arbitrary SQL...

7.3CVSS6AI score0.00251EPSS
SaveExploits0References7
RedhatCVE
RedhatCVE
•added 2025/02/28 12:22 a.m.•21 views

CVE-2024-57423

A Cross Site Scripting vulnerability in CloudClassroom-PHP Project v1.0 allows a remote attacker to execute arbitrary code via the exid parameter of the assessment function...

6.1CVSS6.9AI score0.00493EPSS
SaveExploits1References1
osv_cve
osv_cve
•added 2025/02/26 9:15 p.m.•20 views

CVE-2024-57423

A Cross Site Scripting vulnerability in CloudClassroom-PHP Project v1.0 allows a remote attacker to execute arbitrary code via the exid parameter of the assessment function...

6.1CVSS6.8AI score0.00493EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/02/26 12:00 a.m.•6 views

CVE-2024-57423: Improper Neutralization of Input During Web Page Generation

A Cross Site Scripting vulnerability in CloudClassroom-PHP Project v1.0 allows a remote attacker to execute arbitrary code via the exid parameter of the assessment function...

6.1CVSS6.9AI score0.00493EPSS
SaveExploits1References1
CVE
CVE
•added 2025/02/26 12:00 a.m.•81 views

CVE-2024-57423

A Cross-Site Scripting (XSS) vulnerability exists in CloudClassroom-PHP Project v1.0 , a cloud classroom website. The flaw is caused by improper neutralization of input in the exid parameter of the assessment function , which may allow a remote attacker to execute arbitrary code. To mitigate this...

6.1CVSS6.8AI score0.00493EPSS
SaveExploits1References1Affected Software1
Rows per page
Query Builder