Cloudclassroom Php Project
Approved changes feed: RSS · Atom
cpe:2.3:a:vishalmathur:cloudclassroom-php_project:1.0:*:*:*:*:*:*:*
part: a version: 1.0 update: *
| Vendor | Vishalmathur (5d106e72-e651-5f9e-b3ff-a61a2f49d5c4) |
|---|---|
| Product | Cloudclassroom Php Project (024a1c68-29e8-5bd8-92c4-c27db8edb3ea) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from purl2cpe mapping |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/mathurvishal/cloudclassroom-php-project |
purl2cpe | 2026-06-01 10:11:22.715258 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-46179 |
vulnerable | 2026-06-08 07:25:11.301245 |
Details available
A SQL Injection vulnerability was discovered in the askquery.php file of CloudClassroom-PHP Project v1.0. The squeryx parameter accepts unsanitized input, which is passed directly into backend SQL queries.
Published: 2025-06-20T00:00:00.000Z
Updated: 2025-06-24T15:28:32.237Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-46178 |
vulnerable | 2026-06-08 07:25:11.300743 |
Details available
Cross-Site Scripting (XSS) vulnerability exists in askquery.php via the eid parameter in the CloudClassroom PHP Project. This allows remote attackers to inject arbitrary JavaScript in the context of a victim s browser session by sending a crafted URL, leading to session hijacking or defacement.
Published: 2025-06-09T00:00:00.000Z
Updated: 2025-06-10T15:12:30.358Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-45542 |
vulnerable | 2026-06-08 07:25:11.032172 |
Details available
SQL injection vulnerability in the registrationform endpoint of CloudClassroom-PHP-Project v1.0. The pass parameter is vulnerable due to improper input validation, allowing attackers to inject SQL queries.
Published: 2025-06-02T00:00:00.000Z
Updated: 2025-06-03T16:03:33.764Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-44608 |
vulnerable | 2026-06-08 07:25:10.688374 |
Details available
CloudClassroom-PHP Project v1.0 was discovered to contain a SQL injection vulnerability via the viewid parameter.
Published: 2025-07-25T00:00:00.000Z
Updated: 2026-07-05T01:04:09.094Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-26199 |
vulnerable | 2026-06-08 07:12:51.488740 |
Details available
CloudClassroom-PHP-Project v1.0 is affected by an insecure credential transmission vulnerability. The application transmits passwords over unencrypted HTTP during the login process, exposing sensitive credentials to potential interception by network-based attackers. A remote attacker with access to the same network (e.g., public Wi-Fi or compromised router) can capture login credentials via Man-in-the-Middle (MitM) techniques. If the attacker subsequently uses the credentials to log in and exploit administrative functions (e.g., file upload), this may lead to remote code execution depending on the environment.
Published: 2025-06-18T00:00:00.000Z
Updated: 2025-06-20T15:48:36.524Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-26198 |
vulnerable | 2026-06-08 07:12:51.488370 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-57459 |
vulnerable | 2026-06-08 06:56:13.537570 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-57423 |
vulnerable | 2026-06-08 06:56:13.521011 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.