CVE-2025-50868: Improper Neutralization of Special Elements used in an SQL Command

A SQL Injection vulnerability exists in the takeassessment2.php file of CloudClassroom-PHP-Project 1.0. The Q4 POST parameter is not properly sanitized before being used in SQL queries...

CVE-2025-50867: Improper Neutralization of Special Elements used in an SQL Command

A SQL Injection vulnerability exists in the takeassessment2.php endpoint of the CloudClassroom-PHP-Project 1.0, where the Q5 POST parameter is directly embedded in SQL statements without sanitization...