Vulnerabilities

TI-2025-28629 CVE-2025-44608 · GHSA-r9h3-hffm-gf8q

CloudClassroom-PHP Project v1.0 was discovered to contain a SQL injection vulnerability via the viewid parameter.

HIGH 70

CloudClassroom-PHP Project v1.0 was discovered to contain a SQL injection vulnerability via the viewid parameter.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00351 Published 2025-07-25 No fix listed CWE-89

TI-2025-28961 CVE-2025-46179 · GHSA-3539-3c95-mf2j

A SQL Injection vulnerability was discovered in the askquery.php file of…

HIGH 82

A SQL Injection vulnerability was discovered in the askquery.php file of CloudClassroom-PHP Project v1.0.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00591 Published 2025-06-20 No fix listed CWE-89

TI-2025-19262 CVE-2025-26199 · GHSA-6j6h-gw62-v4w9

CloudClassroom-PHP-Project v1.0 is affected by an insecure credential transmission…

HIGH 82

CloudClassroom-PHP-Project v1.0 is affected by an insecure credential transmission vulnerability.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0057 Published 2025-06-18 No fix listed CWE-319

TI-2025-19261 CVE-2025-26198 · GHSA-wh3m-7fwp-mxjw

CloudClassroom-PHP-Project v1.0 contains a critical SQL Injection vulnerability in the…

HIGH 82

CloudClassroom-PHP-Project v1.0 contains a critical SQL Injection vulnerability in the loginlinkadmin.php component.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00629 Published 2025-06-18 No fix listed CWE-89

TI-2025-28960 CVE-2025-46178 · GHSA-qfp6-39x3-xvfc

Cross-Site Scripting (XSS) vulnerability exists in askquery.php via the eid parameter in…

MEDIUM 60

Cross-Site Scripting (XSS) vulnerability exists in askquery.php via the eid parameter in the CloudClassroom PHP Project.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00409 Published 2025-06-09 No fix listed CWE-79

TI-2025-28800 CVE-2025-45542 · GHSA-jvhv-7727-rf3v

SQL injection vulnerability in the registrationform endpoint of…

HIGH 71

SQL injection vulnerability in the registrationform endpoint of CloudClassroom-PHP-Project v1.0.

CVSS 3.1HIGH 7.3 Network No auth No interaction EPSS 0.01135 Published 2025-06-02 No fix listed CWE-89

TI-2024-37902 CVE-2024-57459 · GHSA-8ghf-hrfq-8q3j

A time-based SQL injection vulnerability exists in mydetailsstudent.php in the…

HIGH 71

A time-based SQL injection vulnerability exists in mydetailsstudent.php in the CloudClassroom PHP Project 1.0.

CVSS 3.1HIGH 7.3 Network No auth No interaction EPSS 0.00251 Published 2025-06-02 No fix listed CWE-89

TI-2024-37884 CVE-2024-57423 · GHSA-px94-7h5c-q5wh

A Cross Site Scripting vulnerability in CloudClassroom-PHP Project v1.0 allows a remote…

MEDIUM 60

A Cross Site Scripting vulnerability in CloudClassroom-PHP Project v1.0 allows a remote attacker to execute arbitrary code via the exid parameter of the assessment function.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00493 Published 2025-02-26 No fix listed CWE-79

Vulnerabilities

Filters