Cloudclassroom
Approved changes feed: RSS · Atom
cpe:2.3:a:vishalmathur:cloudclassroom:1.0:*:*:*:*:*:*:*
part: a version: 1.0 update: *
| Vendor | Vishalmathur (5d106e72-e651-5f9e-b3ff-a61a2f49d5c4) |
|---|---|
| Product | Cloudclassroom (2d317465-9471-569b-bac9-9e79efad32a8) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from purl2cpe mapping |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/mathurvishal/cloudclassroom-php-project |
purl2cpe | 2026-06-01 10:11:22.712821 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-50867 |
vulnerable | 2026-06-08 07:31:11.084405 |
Details available
A SQL Injection vulnerability exists in the takeassessment2.php endpoint of the CloudClassroom-PHP-Project 1.0, where the Q5 POST parameter is directly embedded in SQL statements without sanitization.
Published: 2025-07-31T00:00:00.000Z
Updated: 2025-07-31T20:01:22.804Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-50866 |
vulnerable | 2026-06-08 07:31:11.084019 |
Details available
CloudClassroom-PHP-Project 1.0 contains a reflected Cross-site Scripting (XSS) vulnerability in the email parameter of the postquerypublic endpoint. Improper sanitization allows an attacker to inject arbitrary JavaScript code that executes in the context of the user s browser, potentially leading to session hijacking or phishing attacks.
Published: 2025-07-31T00:00:00.000Z
Updated: 2025-07-31T20:05:47.815Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.