CVE-2025-26198

CVE-2025-26198 — CloudClassroom-PHP-Project v1.0 suffers a critical SQL Injection in the admin login path (loginlinkadmin.php) where unsanitized input is used directly in SQL queries. This enables unauthenticated users to bypass authentication and gain full admin access, potentially exposing or m...

CVE-2025-26199

CloudClassroom-PHP-Project v1.0 is affected by insecure credential transmission: login credentials are sent over HTTP, enabling MitM exposure. A compromised session could allow an attacker to login and potentially trigger administrative actions (e.g., file uploads) leading to remote code executio...

CVE-2025-46179

CloudClassroom-PHP Project v1.0 contains a SQL injection in askquery.php via the unsanitized squeryx parameter, which is passed directly into backend SQL queries. This vulnerability has a CVSSv3.1 base score of 9.8 (CRITICAL) with network attack vector, low attack complexity, no privileges, no us...