Lucene search
K

94 matches found

Vulnrichment
Vulnrichment
added 2025/06/02 12:0 a.m.3 views

CVE-2025-45542

SQL injection vulnerability in the registrationform endpoint of CloudClassroom-PHP-Project v1.0. The pass parameter is vulnerable due to improper input validation, allowing attackers to inject SQL queries...

7.5AI score0.00995EPSS
Exploits3References2
Positive Technologies
Positive Technologies
added 2025/06/02 12:0 a.m.3 views

PT-2025-23534 · Unknown · Cloudclassroom-Php Project

Name of the Vulnerable Software and Affected Versions: CloudClassroom PHP Project version 1.0 Description: A time-based SQL injection issue exists due to improper validation of user input in the myds parameter of the mydetailsstudent.php file. This allows an attacker to inject arbitrary SQL...

7.3CVSS7.4AI score0.00211EPSS
Exploits0References7
Positive Technologies
Positive Technologies
added 2025/06/02 12:0 a.m.3 views

PT-2025-23532 · Unknown · Cloudclassroom-Php Project

Name of the Vulnerable Software and Affected Versions: CloudClassroom-PHP-Project version 1.0 Description: A SQL injection vulnerability exists in the registrationform endpoint of CloudClassroom-PHP-Project due to improper input validation, allowing attackers to inject SQL queries. The pass...

7.3CVSS7.7AI score0.00995EPSS
Exploits3References12
Cvelist
Cvelist
added 2025/06/02 12:0 a.m.10 views

CVE-2024-57459

A time-based SQL injection vulnerability exists in mydetailsstudent.php in the CloudClassroom PHP Project 1.0. The myds parameter does not properly validate user input, allowing an attacker to inject arbitrary SQL commands...

0.00211EPSS
Exploits0References2
CVE
CVE
added 2025/06/02 12:0 a.m.58 views

CVE-2025-45542

CVE-2025-45542 affects CloudClassroom-PHP-Project v1.0, specifically the registrationform endpoint where the pass parameter is not properly validated, enabling a time-based blind SQL injection. Multiple connected sources corroborate that an unauthenticated remote attacker can manipulate backend S...

7.3CVSS7.9AI score0.00995EPSS
Exploits3References3Affected Software1
CVE
CVE
added 2025/06/02 12:0 a.m.51 views

CVE-2024-57459

CVE-2024-57459 describes a time-based SQL injection in the CloudClassroom PHP Project 1.0, stemming from improper validation of the myds parameter in mydetailsstudent.php. This allows arbitrary SQL execution via the input, as detailed in multiple connected records. The vulnerability affects the m...

7.3CVSS7.5AI score0.00211EPSS
Exploits0References2Affected Software1
RedhatCVE
RedhatCVE
added 2025/02/28 12:22 a.m.8 views

CVE-2024-57423

A Cross Site Scripting vulnerability in CloudClassroom-PHP Project v1.0 allows a remote attacker to execute arbitrary code via the exid parameter of the assessment function...

6.1CVSS7.2AI score0.00452EPSS
Exploits1References1
OSV
OSV
added 2025/02/26 9:15 p.m.4 views

CVE-2024-57423

A Cross Site Scripting vulnerability in CloudClassroom-PHP Project v1.0 allows a remote attacker to execute arbitrary code via the exid parameter of the assessment function...

6.1CVSS6.1AI score0.00452EPSS
Exploits1References1
NVD
NVD
added 2025/02/26 9:15 p.m.4 views

CVE-2024-57423

A Cross Site Scripting vulnerability in CloudClassroom-PHP Project v1.0 allows a remote attacker to execute arbitrary code via the exid parameter of the assessment function...

6.1CVSS0.00452EPSS
Exploits1References1
Vulnrichment
Vulnrichment
added 2025/02/26 12:0 a.m.5 views

CVE-2024-57423

A Cross Site Scripting vulnerability in CloudClassroom-PHP Project v1.0 allows a remote attacker to execute arbitrary code via the exid parameter of the assessment function...

6.5AI score0.00452EPSS
Exploits1References1
CNNVD
CNNVD
added 2025/02/26 12:0 a.m.2 views

CloudClassroom-PHP-Project 安全漏洞

CloudClassroom-PHP-Project is a cloud classroom website by the individual developer Vishal Mathur. A security vulnerability exists in CloudClassroom-PHP-Project v1.0, which stems from the exid parameter of the assessment function being vulnerable to cross-site scripting attacks...

6.1CVSS6.1AI score0.00452EPSS
Exploits1References3
Cvelist
Cvelist
added 2025/02/26 12:0 a.m.10 views

CVE-2024-57423

A Cross Site Scripting vulnerability in CloudClassroom-PHP Project v1.0 allows a remote attacker to execute arbitrary code via the exid parameter of the assessment function...

0.00452EPSS
Exploits1References1
Positive Technologies
Positive Technologies
added 2025/02/26 12:0 a.m.2 views

PT-2025-8749 · Unknown · Cloudclassroom-Php Project

Name of the Vulnerable Software and Affected Versions: CloudClassroom-PHP Project version 1.0 Description: A Cross Site Scripting issue allows a remote attacker to execute arbitrary code via the exid parameter of the assessment function. Recommendations: For CloudClassroom-PHP Project version 1.0...

6.1CVSS7AI score0.00452EPSS
Exploits1References7
CVE
CVE
added 2025/02/26 12:0 a.m.56 views

CVE-2024-57423

CVE-2024-57423 describes a Cross Site Scripting vulnerability in CloudClassroom-PHP Project v1.0, where the exid parameter of the assessment function can be exploited to execute arbitrary code by a remote attacker. The NVD entry assigns CVSS‑3.1 metrics: AV:N, AC:L, PR:N, UI:R, S:C, C:L/I:L/A:N, ...

6.1CVSS7AI score0.00452EPSS
Exploits1References1Affected Software1
Rows per page
Query Builder