A SQL injection vulnerability exists in the addnewstudent.php file of the mathurvishal CloudClassroom-PHP-Project up to commit 5dadec098bfbbf3300d60c3494db3fb95b66e7be. This vulnerability allows remote attackers to inject malicious SQL code via an unknown function, potentially leading to unauthorized database access or manipulation. The project follows a rolling release model, so no fixed or affected version numbers are available. The vendor was contacted but did not provide any response or patch information. An exploit has been published, but there is no evidence of widespread exploitation in the wild.

Successful exploitation of this SQL injection vulnerability could allow remote attackers to execute arbitrary SQL commands on the backend database, potentially leading to unauthorized data access, data modification, or other database impacts. The medium CVSS score reflects the potential for significant but not critical impact. No confirmed active exploitation is reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since the vendor has not responded and no patch links are provided, users should monitor official project channels for updates. Until a fix is available, restricting access to the vulnerable script and employing web application firewalls to detect and block SQL injection attempts may help mitigate risk.