201 matches found
CVE-2026-97882: Improper Neutralization of Special Elements used in an SQL Command
A weakness has been identified in mathurvishal CloudClassroom-PHP-Project up to 5dadec098bfbbf3300d60c3494db3fb95b66e7be. The impacted element is an unknown function of the file loginlinkfaculty.php of the component Faculty Authentication. Executing a manipulation of the argument fid/pass can lea...
PT-2026-99048
Name of the Vulnerable Software and Affected Versions CloudClassroom-PHP-Project versions up to 5dadec098bfbbf3300d60c3494db3fb95b66e7be Description A remote SQL injection exists in the managevideos2.php file. This issue occurs when the editassid argument is manipulated, allowing an attacker to...
PT-2026-98960
Name of the Vulnerable Software and Affected Versions CloudClassroom-PHP-Project versions up to 5dadec098bfbbf3300d60c3494db3fb95b66e7be Description A remote SQL injection exists within the Student Update Functionality component in the updatestudent.php file. The issue occurs when the eno argumen...
PT-2026-98955
Name of the Vulnerable Software and Affected Versions CloudClassroom-PHP-Project versions up to 5dadec098bfbbf3300d60c3494db3fb95b66e7be Description A SQL injection flaw exists in the Faculty Authentication component within the loginlinkfaculty.php file. A remote attacker can exploit this by...
CVE-2026-97886: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability has been found in mathurvishal CloudClassroom-PHP-Project up to 5dadec098bfbbf3300d60c3494db3fb95b66e7be. Affected by this vulnerability is an unknown functionality of the file managevideos2.php. Such manipulation of the argument editassid leads to sql injection. The attack may be...
CVE-2026-97883: Improper Neutralization of Special Elements used in an SQL Command
A security vulnerability has been detected in mathurvishal CloudClassroom-PHP-Project up to 5dadec098bfbbf3300d60c3494db3fb95b66e7be. This affects an unknown function of the file updatequery.php. The manipulation of the argument gid leads to sql injection. The attack can be initiated remotely. Th...
CVE-2026-97885: Improper Neutralization of Special Elements used in an SQL Command
A flaw has been found in mathurvishal CloudClassroom-PHP-Project up to 5dadec098bfbbf3300d60c3494db3fb95b66e7be. Affected is an unknown function of the file updatefaculty.php. This manipulation of the argument fid causes sql injection. The attack may be initiated remotely. The exploit has been...
CVE
CloudClassroom PHP 1.0 – Authenticated Stored Cross-Site Scrip...
Advisory-CloundClassroom-PHP-Project-1.0
Security Advisory — SQL Injection in CloudClassroom PHP Projec...
Advisory-CloudClassroom-PHP-Project-1.0
Advisory-CloudClassroom-PHP-Project-1.0 Security Advisories &...
CVE-2026-2058
The CVE-2026-2058 entry affects mathurvishal CloudClassroom-PHP-Project (Post Query Details Page, postquerypublic.php). A SQL injection arises from unsafely handling the gnamex parameter in the Post Query functionality, allowing remote attackers to inject SQL via POST requests to /postquerypublic...
CVE-2026-2058: Improper Neutralization of Special Elements used in an SQL Command
A flaw has been found in mathurvishal CloudClassroom-PHP-Project up to 5dadec098bfbbf3300d60c3494db3fb95b66e7be. This impacts an unknown function of the file /postquerypublic.php of the component Post Query Details Page. This manipulation of the argument gnamex causes sql injection. The attack is...
EUVD-2025-5286
Malicious code in bioql PyPI...
EUVD-2025-22708
Malicious code in bioql PyPI...
EUVD-2025-23284
Malicious code in bioql PyPI...
EUVD-2025-23370
Malicious code in bioql PyPI...
EUVD-2025-18756
Malicious code in bioql PyPI...
EUVD-2025-16669
Malicious code in bioql PyPI...
CVE-2025-50868
A SQL Injection vulnerability exists in the takeassessment2.php file of CloudClassroom-PHP-Project 1.0. The Q4 POST parameter is not properly sanitized before being used in SQL queries...
CVE-2025-50866
CloudClassroom-PHP-Project 1.0 contains a reflected Cross-site Scripting XSS vulnerability in the email parameter of the postquerypublic endpoint. Improper sanitization allows an attacker to inject arbitrary JavaScript code that executes in the context of the user s browser, potentially leading t...