CVE-2025-50866

CloudClassroom-PHP-Project 1.0 contains a reflected Cross-site Scripting XSS vulnerability in the email parameter of the postquerypublic endpoint. Improper sanitization allows an attacker to inject arbitrary JavaScript code that executes in the context of the user s browser, potentially leading t...

CVE-2025-50867

A SQL Injection vulnerability exists in the takeassessment2.php endpoint of the CloudClassroom-PHP-Project 1.0, where the Q5 POST parameter is directly embedded in SQL statements without sanitization. Vulnerability Type : SQL Injection Vendor of Product :...

CVE-2025-46178

CVE-2025-46178 Cross-Site Scripting XSS vulnerability exists in askquery.php via the eid parameter in the CloudClassroom PHP Project. This allows remote attackers to inject arbitrary JavaScript in the context of a victim s browser session by sending a crafted URL, leading to session hijacking or...

CVE-2025-26198

🛡️ CVE 披露：CVE-2025-26198 — CloudClassroom-PHP-Project 中的 SQL 注入漏洞 披露日期： 2025年6月18日 CVE ID： CVE-2025-26198 严重性： 严重 CVSS 9.8 🧩 概述 CloudClassroom-PHP-Project v1.0 中存在一个严重的 SQL 注入漏洞，具体位于 loginlinkadmin.php 端点。该应用程序直接将未经过滤的用户输入拼接到 SQL 查询中，使得未经身份验证的攻击者能够绕过身份验证并获取完全的管理员访问权限。 此问题已分配标识符 CVE-2025-26198...

CVE-2025-26199

🛡️ CVE-2025-26199 — CloudClassroom-PHP-Project v1.0 通过明文不安全地传输密码 📄 描述 CloudClassroom-PHP-Project v1.0 存在用户凭证不安全传输的漏洞。在身份验证过程中，密码通过未加密的 HTTP 而非 HTTPS 提交。这会将敏感信息（即用户名和密码）暴露给网络攻击者，攻击者可通过数据包嗅探或中间人（MitM）攻击进行拦截。 如果攻击者捕获了有效的管理员凭证，他们可能会登录系统，并可能利用应用程序的其他功能（例如文件上传或远程 shell 注入）实现远程代码执行，具体取决于部署环境和系统配置。 📦 受影响产...

CVE-2026-2058-PoC

CVE-2026-2058-PoC – CloudClassroom PHP 项目 SQL 注入 概述 CloudClassroom PHP 项目 v1.0 的 Post Query 功能 中存在一个 SQL 注入漏洞 。 该漏洞允许攻击者通过 squeryx POST 参数注入任意 SQL 命令，从而导致数据库枚举和数据窃取 。 本仓库包含一个 概念验证 PoC 漏洞利用程序 ，演示了如何利用该漏洞从后端数据库中窃取敏感数据。 漏洞信息 字段| 值 ---|--- CVE| CVE-2026-2058 漏洞类型| SQL 注入 CWE| CWE-89 受影响软件|...

CVE-2025-26198

CVE-2025-26198 - SQL Injection Demonstration Academic project ENSIMAG - Security 3A Authors: Wail Yacoubi, Mohammed-Yassine Akhmari Date: January 2026 Warning This code is intentionally vulnerable for educational purposes. Never deploy in production. Description Reproduction of CVE-2025-26198:...

CVE-2026-10225

A vulnerability was detected in raisulislamg4 studentmanagementsystembyphp up to 310d950e09013d5133c6b9210aff9444382d16d1. This issue affects some unknown processing of the file logincheck.php of the component Login. Performing a manipulation of the argument Username results in sql injection. The...

CVE-2026-5837 PHPGurukul News Portal Project news-details.php sql injection

A vulnerability was found in PHPGurukul News Portal Project 4.1. This affects an unknown part of the file /news-details.php. The manipulation of the argument Comment results in sql injection. The attack can be launched remotely. The exploit has been made public and could be used...

EUVD-2020-18585

Malware in sbrugna...

EUVD-2025-23370

Malicious code in bioql PyPI...

EUVD-2025-23284

Malicious code in bioql PyPI...

EUVD-2024-46724

Malicious code in bioql PyPI...

EUVD-2024-27221

Malicious code in bioql PyPI...

EUVD-2024-2964

Malicious code in bioql PyPI...

EUVD-2023-38544

Malicious code in bioql PyPI...

EUVD-2025-16669

Malicious code in bioql PyPI...

EUVD-2025-18756

Malicious code in bioql PyPI...

PT-2025-40398

Name of the Vulnerable Software and Affected Versions PHPGurukul Online Shopping Portal Project versions 2.1 Description The software is susceptible to a SQL Injection issue. This flaw is located in the /shopping/login.php file and can be triggered through the fullname parameter. Recommendations...

CVE-2025-50868

A SQL Injection vulnerability exists in the takeassessment2.php file of CloudClassroom-PHP-Project 1.0. The Q4 POST parameter is not properly sanitized before being used in SQL queries...