Lucene search
+L

237 matches found

Vulnrichment
Vulnrichment
•added 2025/06/02 12:00 a.m.•4 views

CVE-2025-45542

SQL injection vulnerability in the registrationform endpoint of CloudClassroom-PHP-Project v1.0. The pass parameter is vulnerable due to improper input validation, allowing attackers to inject SQL queries...

7.5AI score0.01088EPSS
SaveExploits3References2
Vulnrichment
Vulnrichment
•added 2025/06/02 12:00 a.m.•11 views

CVE-2024-57459

A time-based SQL injection vulnerability exists in mydetailsstudent.php in the CloudClassroom PHP Project 1.0. The myds parameter does not properly validate user input, allowing an attacker to inject arbitrary SQL commands...

7.5AI score0.0024EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2025/06/02 12:00 a.m.•30 views

CVE-2025-45542

SQL injection vulnerability in the registrationform endpoint of CloudClassroom-PHP-Project v1.0. The pass parameter is vulnerable due to improper input validation, allowing attackers to inject SQL queries...

0.01088EPSS
SaveExploits3References2
Positive Technologies
Positive Technologies
•added 2025/06/02 12:00 a.m.•15 views

PT-2025-23532 · Unknown · Cloudclassroom-Php Project

Name of the Vulnerable Software and Affected Versions: CloudClassroom-PHP-Project version 1.0 Description: A SQL injection vulnerability exists in the registrationform endpoint of CloudClassroom-PHP-Project due to improper input validation, allowing attackers to inject SQL queries. The pass...

7.3CVSS7.7AI score0.01088EPSS
SaveExploits3References12
CVE
CVE
•added 2025/06/02 12:00 a.m.•82 views

CVE-2025-45542

The CloudClassroom-PHP-Project v1.0 is vulnerable to a time-based blind remote SQL injection in its registrationform endpoint. The root cause is the improper sanitization and validation of the pass parameter, which allows an unauthenticated remote attacker to manipulate backend SQL logic, potenti...

7.3CVSS7.9AI score0.01088EPSS
SaveExploits3References3Affected Software1
Cvelist
Cvelist
•added 2025/06/02 12:00 a.m.•32 views

CVE-2024-57459

A time-based SQL injection vulnerability exists in mydetailsstudent.php in the CloudClassroom PHP Project 1.0. The myds parameter does not properly validate user input, allowing an attacker to inject arbitrary SQL commands...

0.0024EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/06/02 12:00 a.m.•5 views

CVE-2025-45542: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the registrationform endpoint of CloudClassroom-PHP-Project v1.0. The pass parameter is vulnerable due to improper input validation, allowing attackers to inject SQL queries...

7.3CVSS5.9AI score0.01088EPSS
SaveExploits3References1
CVE
CVE
•added 2025/06/02 12:00 a.m.•67 views

CVE-2024-57459

The CloudClassroom PHP Project version 1.0 is vulnerable to a time-based SQL injection in the mydetailsstudent.php file. The root cause is the improper validation of user input within the myds parameter, which allows an attacker to inject arbitrary SQL commands. Practical impact includes the exec...

7.3CVSS7.5AI score0.0024EPSS
SaveExploits0References2Affected Software1
RedhatCVE
RedhatCVE
•added 2025/02/28 12:22 a.m.•17 views

CVE-2024-57423

A Cross Site Scripting vulnerability in CloudClassroom-PHP Project v1.0 allows a remote attacker to execute arbitrary code via the exid parameter of the assessment function...

6.1CVSS7.2AI score0.00493EPSS
SaveExploits1References1
NVD
NVD
•added 2025/02/26 9:15 p.m.•12 views

CVE-2024-57423

A Cross Site Scripting vulnerability in CloudClassroom-PHP Project v1.0 allows a remote attacker to execute arbitrary code via the exid parameter of the assessment function...

6.1CVSS0.00493EPSS
SaveExploits1References1
OSV
OSV
•added 2025/02/26 9:15 p.m.•14 views

CVE-2024-57423

A Cross Site Scripting vulnerability in CloudClassroom-PHP Project v1.0 allows a remote attacker to execute arbitrary code via the exid parameter of the assessment function...

6.1CVSS6.1AI score0.00493EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2025/02/26 12:00 a.m.•12 views

PT-2025-8749 · Unknown · Cloudclassroom-Php Project

Name of the Vulnerable Software and Affected Versions: CloudClassroom-PHP Project version 1.0 Description: A Cross Site Scripting issue allows a remote attacker to execute arbitrary code via the exid parameter of the assessment function. Recommendations: For CloudClassroom-PHP Project version 1.0...

6.1CVSS7AI score0.00493EPSS
SaveExploits1References7
CVE
CVE
•added 2025/02/26 12:00 a.m.•74 views

CVE-2024-57423

A Cross-Site Scripting (XSS) vulnerability exists in CloudClassroom-PHP Project v1.0 , a cloud classroom website. The flaw is caused by improper neutralization of input in the exid parameter of the assessment function , which may allow a remote attacker to execute arbitrary code. To mitigate this...

6.1CVSS7AI score0.00493EPSS
SaveExploits1References1Affected Software1
Vulnrichment
Vulnrichment
•added 2025/02/26 12:00 a.m.•8 views

CVE-2024-57423

A Cross Site Scripting vulnerability in CloudClassroom-PHP Project v1.0 allows a remote attacker to execute arbitrary code via the exid parameter of the assessment function...

6.5AI score0.00493EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2025/02/26 12:00 a.m.•17 views

CloudClassroom-PHP-Project 安全漏洞

CloudClassroom-PHP-Project is a cloud classroom website by the individual developer Vishal Mathur. A security vulnerability exists in CloudClassroom-PHP-Project v1.0, which stems from the exid parameter of the assessment function being vulnerable to cross-site scripting attacks...

6.1CVSS6.1AI score0.00493EPSS
SaveExploits1References3
Cvelist
Cvelist
•added 2025/02/26 12:00 a.m.•26 views

CVE-2024-57423

A Cross Site Scripting vulnerability in CloudClassroom-PHP Project v1.0 allows a remote attacker to execute arbitrary code via the exid parameter of the assessment function...

0.00493EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/02/26 12:00 a.m.•3 views

CVE-2024-57423: Improper Neutralization of Input During Web Page Generation

A Cross Site Scripting vulnerability in CloudClassroom-PHP Project v1.0 allows a remote attacker to execute arbitrary code via the exid parameter of the assessment function...

6.1CVSS6.6AI score0.00493EPSS
SaveExploits1References1
Rows per page
Query Builder