PT-2026-99435 · Unknown · Cloudclassroom-Php Project
CVSS v2.0
7.5
High
| Vector | AV:N/AC:L/Au:N/C:P/I:P/A:P |
Name of the Vulnerable Software and Affected Versions
mathurvishal CloudClassroom-PHP-Project versions up to 5dadec098bfbbf3300d60c3494db3fb95b66e7be
Description
A SQL injection issue exists in the
viewresult.php file. This occurs when the seno argument is manipulated, allowing for remote exploitation. SQL injection is a technique where an attacker inserts malicious SQL code into a query, potentially allowing them to view, modify, or delete data from the database.Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Avoid using the
seno argument in the viewresult.php file to minimize the risk of exploitation.Exploit
SQL injection
Special Elements Injection
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Cloudclassroom-Php Project