Vendors / Vishalmathur Records 14 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 5
CVSS high 2
Exploited now Vishalmathur records in CISA KEV No Vishalmathur vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority HIGH 82
A SQL injection vulnerability exists in the id2 parameter of the cancel_booking.php page in Online Artwork and Fine Arts MCA Project 1.0.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00835 · Published 2025-08-20 · No fix listed CWE-20
Priority HIGH 82
Institute-of-Current-Students v1.0 contains a time-based blind SQL injection vulnerability in the mydetailsstudent.php endpoint.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00317 · Published 2025-11-20 · No fix listed CWE-89
Priority HIGH 82
A SQL Injection vulnerability was discovered in the askquery.php file of CloudClassroom-PHP Project v1.0.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00591 · Published 2025-06-20 · No fix listed CWE-89
Priority HIGH 82
CloudClassroom-PHP-Project v1.0 is affected by an insecure credential transmission vulnerability.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.0057 · Published 2025-06-18 · No fix listed CWE-319
Priority HIGH 82
CloudClassroom-PHP-Project v1.0 contains a critical SQL Injection vulnerability in the loginlinkadmin.php component.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00629 · Published 2025-06-18 · No fix listed CWE-89
Priority HIGH 71
SQL injection vulnerability in the registrationform endpoint of CloudClassroom-PHP-Project v1.0.
CVSS 3.1 HIGH 7.3· Network · No auth · No interaction · EPSS 0.01135 · Published 2025-06-02 · No fix listed CWE-89
Priority HIGH 71
A time-based SQL injection vulnerability exists in mydetailsstudent.php in the CloudClassroom PHP Project 1.0.
CVSS 3.1 HIGH 7.3· Network · No auth · No interaction · EPSS 0.00251 · Published 2025-06-02 · No fix listed CWE-89
Priority HIGH 70
A flaw has been found in mathurvishal CloudClassroom-PHP-Project up to 5dadec098bfbbf3300d60c3494db3fb95b66e7be.
CVSS 4.0 MEDIUM 6.9· Network · No auth · No interaction · EPSS 0.00556 · Published 2026-02-06 · No fix listed CWE-74
Priority HIGH 70
A SQL Injection vulnerability exists in the takeassessment2.php endpoint of the CloudClassroom-PHP-Project 1.0, where the Q5 POST parameter is directly embedded in SQL statements without sanitization.
CVSS 3.1 MEDIUM 6.5· Network · No auth · No interaction · EPSS 0.00281 · Published 2025-07-31 · No fix listed CWE-89
Priority HIGH 70
CloudClassroom-PHP Project v1.0 was discovered to contain a SQL injection vulnerability via the viewid parameter.
CVSS 3.1 MEDIUM 6.5· Network · No auth · No interaction · EPSS 0.00351 · Published 2025-07-25 · No fix listed CWE-89
Priority MEDIUM 60
A reflected cross-site scripting (XSS) vulnerability exists in Institute-of-Current-Students v1.0 via the email parameter in the /postquerypublic endpoint.
CVSS 3.1 MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00367 · Published 2025-07-25 · No fix listed CWE-79
Priority MEDIUM 60
CloudClassroom-PHP-Project 1.0 contains a reflected Cross-site Scripting (XSS) vulnerability in the email parameter of the postquerypublic endpoint.
CVSS 3.1 MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.0032 · Published 2025-07-31 · No fix listed CWE-79
Priority MEDIUM 60
Cross-Site Scripting (XSS) vulnerability exists in askquery.php via the eid parameter in the CloudClassroom PHP Project.
CVSS 3.1 MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00409 · Published 2025-06-09 · No fix listed CWE-79
Priority MEDIUM 60
A Cross Site Scripting vulnerability in CloudClassroom-PHP Project v1.0 allows a remote attacker to execute arbitrary code via the exid parameter of the assessment function.
CVSS 3.1 MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00493 · Published 2025-02-26 · No fix listed CWE-79
Open these records in search → All records by CVSS severity
5 2 7 0 0
THREATIST.IORead the docs