Rmsbpro

**Name of the Vulnerable Software and Affected Versions** CloudClassroom-PHP-Project versions up to 5dadec098bfbbf3300d60c3494db3fb95b66e7be **Description** A remote SQL injection is possible via the `myfid` argument in the `updatedetailsfromfaculty.php` file. SQL injection is a technique where an attacker inserts malicious SQL code into a query, allowing them to manipulate the database. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability. Avoid using the `myfid` argument in the `updatedetailsfromfaculty.php` file to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** mathurvishal CloudClassroom-PHP-Project versions up to 5dadec098bfbbf3300d60c3494db3fb95b66e7be **Description** An issue exists in the file loginlinkstudent.php where manipulating the `umail` argument allows for missing authentication. This flaw enables remote exploitation. **Recommendations** As a temporary workaround, restrict access to the file loginlinkstudent.php or avoid using the `umail` parameter until a fix is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** mathurvishal CloudClassroom-PHP-Project versions up to 5dadec098bfbbf3300d60c3494db3fb95b66e7be **Description** A remote cross site scripting issue exists in the `registrationform.php` file. This occurs when the `FName`, `LName`, or `Addrs` arguments are manipulated, allowing an attacker to execute malicious scripts in the victim's browser. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability. Avoid using the `FName`, `LName`, and `Addrs` parameters in the `registrationform.php` file to minimize the risk of exploitation.