PT-2026-99695 · Unknown · Cloudclassroom-Php Project

·

CVE-2026-100876

·

Published

2026-09-27

·

Updated

2026-09-27

CVSS v2.0

6.5

Medium

VectorAV:N/AC:L/Au:S/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions mathurvishal CloudClassroom-PHP-Project versions up to 5dadec098bfbbf3300d60c3494db3fb95b66e7be
Description An issue exists in the file loginlinkstudent.php where manipulating the umail argument allows for missing authentication. This flaw enables remote exploitation.
Recommendations As a temporary workaround, restrict access to the file loginlinkstudent.php or avoid using the umail parameter until a fix is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Missing Authentication

Improper Authentication

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

CVE-2026-100876

Affected Products

Cloudclassroom-Php Project