CVE-2025-46178

CVE-2025-46178 Cross-Site Scripting XSS vulnerability exists in askquery.php via the eid parameter in the CloudClassroom PHP Project. This allows remote attackers to inject arbitrary JavaScript in the context of a victim s browser session by sending a crafted URL, leading to session hijacking or...

CVE-2025-50866

CloudClassroom-PHP-Project 1.0 contains a reflected Cross-site Scripting XSS vulnerability in the email parameter of the postquerypublic endpoint. Improper sanitization allows an attacker to inject arbitrary JavaScript code that executes in the context of the user s browser, potentially leading t...

CVE-2025-50867

A SQL Injection vulnerability exists in the takeassessment2.php endpoint of the CloudClassroom-PHP-Project 1.0, where the Q5 POST parameter is directly embedded in SQL statements without sanitization. Vulnerability Type : SQL Injection Vendor of Product :...

CVE-2025-26198

🛡️ CVE 披露：CVE-2025-26198 — CloudClassroom-PHP-Project 中的 SQL 注入漏洞 披露日期： 2025年6月18日 CVE ID： CVE-2025-26198 严重性： 严重 CVSS 9.8 🧩 概述 CloudClassroom-PHP-Project v1.0 中存在一个严重的 SQL 注入漏洞，具体位于 loginlinkadmin.php 端点。该应用程序直接将未经过滤的用户输入拼接到 SQL 查询中，使得未经身份验证的攻击者能够绕过身份验证并获取完全的管理员访问权限。 此问题已分配标识符 CVE-2025-26198...

CVE-2025-26199

🛡️ CVE-2025-26199 — CloudClassroom-PHP-Project v1.0 通过明文不安全地传输密码 📄 描述 CloudClassroom-PHP-Project v1.0 存在用户凭证不安全传输的漏洞。在身份验证过程中，密码通过未加密的 HTTP 而非 HTTPS 提交。这会将敏感信息（即用户名和密码）暴露给网络攻击者，攻击者可通过数据包嗅探或中间人（MitM）攻击进行拦截。 如果攻击者捕获了有效的管理员凭证，他们可能会登录系统，并可能利用应用程序的其他功能（例如文件上传或远程 shell 注入）实现远程代码执行，具体取决于部署环境和系统配置。 📦 受影响产...

CVE-2026-2058-PoC

CVE-2026-2058-PoC – Inyección SQL en el Proyecto PHP CloudClassroom Resumen Existe una vulnerabilidad de Inyección SQL en la funcionalidad Post Query del Proyecto PHP CloudClassroom v1.0. La vulnerabilidad permite a los atacantes inyectar comandos SQL arbitrarios a través del parámetro POSTsquery...

CVE-2025-26198

CVE-2025-26198 - SQL Injection Demonstration Academic project ENSIMAG - Security 3A Authors: Wail Yacoubi, Mohammed-Yassine Akhmari Date: January 2026 Warning This code is intentionally vulnerable for educational purposes. Never deploy in production. Description Reproduction of CVE-2025-26198:...

EUVD-2025-23370

Malicious code in bioql PyPI...

EUVD-2025-23284

Malicious code in bioql PyPI...

EUVD-2025-16669

Malicious code in bioql PyPI...

EUVD-2025-18756

Malicious code in bioql PyPI...

CVE-2025-50868

A SQL Injection vulnerability exists in the takeassessment2.php file of CloudClassroom-PHP-Project 1.0. The Q4 POST parameter is not properly sanitized before being used in SQL queries...

CVE-2025-50866

CloudClassroom-PHP-Project 1.0 contains a reflected Cross-site Scripting XSS vulnerability in the email parameter of the postquerypublic endpoint. Improper sanitization allows an attacker to inject arbitrary JavaScript code that executes in the context of the user s browser, potentially leading t...

CVE-2025-50868

A SQL Injection vulnerability exists in the takeassessment2.php file of CloudClassroom-PHP-Project 1.0. The Q4 POST parameter is not properly sanitized before being used in SQL queries...

PT-2025-31658 · Unknown · Cloudclassroom-Php Project

Name of the Vulnerable Software and Affected Versions: CloudClassroom-PHP-Project version 1.0 Description: A SQL Injection issue exists in the takeassessment2.php file. The Q4 POST parameter is not properly sanitized before being used in SQL queries. Recommendations: Ensure proper sanitization of...

CVE-2025-50868

A SQL Injection vulnerability exists in the takeassessment2.php file of CloudClassroom-PHP-Project 1.0. The Q4 POST parameter is not properly sanitized before being used in SQL queries...

CVE-2025-50868

CVE-2025-50868 affects CloudClassroom-PHP-Project 1.0, specifically the takeassessment2.php file where the Q4 POST parameter is not properly sanitized before being used in SQL queries, enabling SQL injection. The CVSS v3.1 base score is 6.5 (Medium) with low confidentiality/integrity impact and n...

CVE-2025-50867

A SQL Injection vulnerability exists in the takeassessment2.php endpoint of the CloudClassroom-PHP-Project 1.0, where the Q5 POST parameter is directly embedded in SQL statements without sanitization...

CVE-2025-50866

CloudClassroom-PHP-Project 1.0 contains a reflected Cross-site Scripting XSS vulnerability in the email parameter of the postquerypublic endpoint. Improper sanitization allows an attacker to inject arbitrary JavaScript code that executes in the context of the user s browser, potentially leading t...

CVE-2025-50866

CVE-2025-50866 concerns CloudClassroom-PHP-Project 1.0, which contains a reflected Cross-site Scripting (XSS) vulnerability in the email parameter of the /postquerypublic endpoint. The vulnerability arises from improper sanitization of user-supplied input, allowing an attacker to inject JavaScrip...