This vulnerability in mathurvishal CloudClassroom-PHP-Project allows an attacker to perform SQL injection by manipulating the editassid parameter in the managevideos2.php file. The flaw enables remote exploitation without user interaction and has been publicly disclosed. Due to the product's rolling release nature, no explicit versioning details are provided for affected or fixed releases. The vendor has not issued any advisory or patch at the time of this report.

Successful exploitation could allow an attacker to execute arbitrary SQL commands on the backend database, potentially leading to unauthorized data access or modification. The vulnerability is remotely exploitable without user interaction, increasing its risk. However, the CVSS score of 5.3 indicates a medium severity impact with limited privileges required and low complexity.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since the vendor has not responded and no patch or workaround is available, users should monitor official channels for updates. Until a fix is released, consider restricting access to the vulnerable functionality or applying web application firewall rules to detect and block SQL injection attempts targeting the editassid parameter.