A security vulnerability has been detected in mathurvishal CloudClassroom-PHP-Project up to 5dadec098bfbbf3300d60c3494db3fb95b66e7be. Affected is an unknown function of the file updateresultdetails.php. Such manipulation of the argument editid leads to sql injection. The attack can be launched remotely. The exploit has been disclosed publicly and may be used. This product does not use versioning. This is why information about affected and unaffected releases are unavailable. The vendor was contacted early about this disclosure but did not respond in any way.
CVE-2026-101012 is a SQL injection vulnerability in the mathurvishal CloudClassroom-PHP-Project affecting the makeresult.php file. The vulnerability arises from manipulation of the makeid argument, allowing remote attackers to inject SQL commands. The affected versions are not clearly identified due to continuous delivery and rolling releases, and the vendor has not responded to the disclosure. The vulnerability has a medium severity with a CVSS score of 6.9. No patch or remediation information is currently available.
CVE-2026-100894 is a medium severity SQL injection vulnerability in the mathurvishal CloudClassroom-PHP-Project affecting the updateguest.php file. The vulnerability arises from improper handling of the 'gname' argument, allowing remote attackers to inject SQL commands. The product uses a rolling release model, so specific affected versions are not clearly identified. The vendor has not responded to disclosure attempts, and no official patch or remediation guidance is available. Public exploit code exists but there is no confirmed exploitation in the wild.
CVE-2026-100877 is a cross-site scripting (XSS) vulnerability in the mathurvishal CloudClassroom-PHP-Project affecting an unknown functionality in registrationform.php. The vulnerability arises from improper handling of the FName, LName, and Addrs parameters, allowing remote attackers to execute script code. The vulnerability has been publicly disclosed, but the vendor has not responded or provided a fix. The product uses a rolling release model, so specific affected or fixed versions are not available.
CVE-2026-100876 is a medium severity vulnerability in the mathurvishal CloudClassroom-PHP-Project affecting an unknown function in loginlinkstudent.php. Manipulating the 'umail' argument leads to missing authentication, allowing remote exploitation. The vulnerability has a public exploit available. The product uses a rolling release model, so specific affected or fixed versions are not provided. The vendor did not respond to disclosure attempts, and no patch information is available.
A vulnerability has been found in mathurvishal CloudClassroom-PHP-Project up to 5dadec098bfbbf3300d60c3494db3fb95b66e7be. This impacts an unknown function of the file updatedetailsfromfaculty.php. Such manipulation of the argument myfid leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. This product operates on a rolling release basis, ensuring continuous delivery. Consequently, there are no version details for either affected or updated releases. The vendor was contacted early about this disclosure but did not respond in any way.
CVE-2026-100874 is a medium severity SQL injection vulnerability in the mathurvishal CloudClassroom-PHP-Project affecting the addnewstudent.php file. The flaw allows remote attackers to manipulate SQL queries, potentially compromising data integrity and confidentiality. The product uses a rolling release model, so specific affected versions are not identified. The vendor did not respond to disclosure attempts, and no patch or remediation information is available. Exploit code has been published but is not known to be actively used in the wild.
CVE-2026-100873 is a cross-site request forgery (CSRF) vulnerability in the mathurvishal CloudClassroom-PHP-Project. The vulnerability affects an unknown function and can be exploited remotely. The product does not use versioning, so specific affected versions cannot be identified. The vendor was contacted but did not respond, and no patch or remediation information is available. The CVSS 4.0 base score is 5.3, indicating a medium severity level. Exploit code is publicly available, but no known active exploitation in the wild has been reported.
CVE-2026-100739 is a medium severity SQL injection vulnerability in the mathurvishal CloudClassroom-PHP-Project affecting the viewresult.php file. The vulnerability arises from manipulation of the 'seno' argument, allowing remote attackers to perform SQL injection. The vendor has not responded to disclosure attempts, and no patch or fixed version information is available due to the product's rolling release model. Exploit code is publicly available, but no confirmed exploitation in the wild has been reported.
A security vulnerability has been detected in mathurvishal CloudClassroom-PHP-Project up to 5dadec098bfbbf3300d60c3494db3fb95b66e7be. This impacts an unknown function of the file updatedetailsfromstudent.php. The manipulation of the argument eno leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed publicly and may be used. Continious delivery with rolling releases is used by this product. Therefore, no version details of affected nor updated releases are available. The vendor was contacted early about this disclosure but did not respond in any way.
A weakness has been identified in mathurvishal CloudClassroom-PHP-Project up to 5dadec098bfbbf3300d60c3494db3fb95b66e7be. This affects an unknown function of the file updatequery.php. Executing a manipulation of the argument queryx can lead to cross site scripting. It is possible to launch the attack remotely. The exploit has been made available to the public and could be used for attacks. This product takes the approach of rolling releases to provide continious delivery. Therefore, version details for affected and updated releases are not available. The vendor was contacted early about this disclosure but did not respond in any way.
A security flaw has been discovered in mathurvishal CloudClassroom-PHP-Project up to 5dadec098bfbbf3300d60c3494db3fb95b66e7be. The impacted element is an unknown function of the file /updateguest.php. Performing a manipulation of the argument gname/editassid results in sql injection. It is possible to initiate the attack remotely. The exploit has been released to the public and may be used for attacks. This product is using a rolling release to provide continious delivery. Therefore, no version details for affected nor updated releases are available. The vendor was contacted early about this disclosure but did not respond in any way.
A vulnerability was identified in mathurvishal CloudClassroom-PHP-Project up to 5dadec098bfbbf3300d60c3494db3fb95b66e7be. The affected element is an unknown function of the file managevideos2.php of the component Faculty Video Management. Such manipulation of the argument V_Title/V_Url/V_Remarks leads to cross site scripting. The attack may be performed from remote. The exploit is publicly available and might be used. This product utilizes a rolling release system for continuous delivery, and as such, version information for affected or updated releases is not disclosed. The vendor was contacted early about this disclosure but did not respond in any way.
A vulnerability has been found in mathurvishal CloudClassroom-PHP-Project up to 5dadec098bfbbf3300d60c3494db3fb95b66e7be. Affected by this vulnerability is an unknown functionality of the file managevideos2.php. Such manipulation of the argument editassid leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. This product operates on a rolling release basis, ensuring continuous delivery. Consequently, there are no version details for either affected or updated releases. The vendor was contacted early about this disclosure but did not respond in any way.
A flaw has been found in mathurvishal CloudClassroom-PHP-Project up to 5dadec098bfbbf3300d60c3494db3fb95b66e7be. Affected is an unknown function of the file updatefaculty.php. This manipulation of the argument fid causes sql injection. The attack may be initiated remotely. The exploit has been published and may be used. This product uses a rolling release model to deliver continuous updates. As a result, specific version information for affected or updated releases is not available. The vendor was contacted early about this disclosure but did not respond in any way.
A vulnerability was detected in mathurvishal CloudClassroom-PHP-Project up to 5dadec098bfbbf3300d60c3494db3fb95b66e7be. This impacts an unknown function of the file updatestudent.php of the component Student Update Functionality. The manipulation of the argument eno results in sql injection. The attack can be launched remotely. The exploit is now public and may be used. This product does not use versioning. This is why information about affected and unaffected releases are unavailable. The vendor was contacted early about this disclosure but did not respond in any way.
A security vulnerability has been detected in mathurvishal CloudClassroom-PHP-Project up to 5dadec098bfbbf3300d60c3494db3fb95b66e7be. This affects an unknown function of the file updatequery.php. The manipulation of the argument gid leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed publicly and may be used. Continious delivery with rolling releases is used by this product. Therefore, no version details of affected nor updated releases are available. The vendor was contacted early about this disclosure but did not respond in any way.
A weakness has been identified in mathurvishal CloudClassroom-PHP-Project up to 5dadec098bfbbf3300d60c3494db3fb95b66e7be. The impacted element is an unknown function of the file loginlinkfaculty.php of the component Faculty Authentication. Executing a manipulation of the argument fid/pass can lead to sql injection. It is possible to launch the attack remotely. The exploit has been made available to the public and could be used for attacks. This product takes the approach of rolling releases to provide continious delivery. Therefore, version details for affected and updated releases are not available. The vendor was contacted early about this disclosure but did not respond in any way.
A flaw has been found in mathurvishal CloudClassroom-PHP-Project up to 5dadec098bfbbf3300d60c3494db3fb95b66e7be. This impacts an unknown function of the file /postquerypublic.php of the component Post Query Details Page. This manipulation of the argument gnamex causes sql injection. The attack is possible to be carried out remotely. The exploit has been published and may be used. This product adopts a rolling release strategy to maintain continuous delivery. Therefore, version details for affected or updated releases cannot be specified. The vendor was contacted early about this disclosure but did not respond in any way.