CVE-2025-45542

The CloudClassroom-PHP-Project v1.0 is vulnerable to a time-based blind remote SQL injection in its registrationform endpoint. The root cause is the improper sanitization and validation of the pass parameter, which allows an unauthenticated remote attacker to manipulate backend SQL logic, potenti...

CVE-2024-57423

A Cross-Site Scripting (XSS) vulnerability exists in CloudClassroom-PHP Project v1.0 , a cloud classroom website. The flaw is caused by improper neutralization of input in the exid parameter of the assessment function , which may allow a remote attacker to execute arbitrary code. To mitigate this...

CVE-2025-46178

A Reflected Cross-Site Scripting (XSS) vulnerability exists in the CloudClassroom PHP Project (specifically version 1.0) within the askquery.php file. The flaw is caused by the eid GET parameter, which fails to properly sanitize or encode input before rendering it in the front-end HTML. Remote at...

CVE-2024-57459

The CloudClassroom PHP Project version 1.0 is vulnerable to a time-based SQL injection in the mydetailsstudent.php file. The root cause is the improper validation of user input within the myds parameter, which allows an attacker to inject arbitrary SQL commands. Practical impact includes the exec...

CVE-2025-26198

The CloudClassroom-PHP-Project v1.0 contains a critical SQL Injection vulnerability (CWE-89) in the loginlinkadmin.php component. The root cause is the application's failure to sanitize user-supplied input in the admin login form before directly incorporating it into SQL queries. An unauthenticat...

CVE-2025-44608

CloudClassroom-PHP Project v1.0 is vulnerable to a SQL injection via the unvalidated viewid parameter. This flaw allows an attacker to use tools like SQLmap to upload a malicious PHP file to the server, ultimately leading to Remote Code Execution (RCE) . As a temporary workaround, it is recommend...

CVE-2025-26199

The CloudClassroom-PHP-Project v1.0 is vulnerable to CWE-319 (Cleartext Transmission of Sensitive Information) because the application transmits passwords over unencrypted HTTP during the login process at the /CloudClassroom-PHP-Project-master/loginlinkadmin.php endpoint. This allows network-base...

CVE-2025-46179

A SQL Injection vulnerability exists in CloudClassroom-PHP Project version 1.0 within the askquery.php file. The application fails to sanitize the squeryx parameter, allowing unsanitized input to be passed directly into backend SQL queries. This flaw could allow an attacker to execute arbitrary S...