Vishalmathur vulnerabilities
We track 7 vulnerabilities in Vishalmathur products across 3 products. 7 are rated high or critical, and none are known to be exploited. The most recent was published on November 20, 2025.
Latest Vishalmathur vulnerabilities
- 9.8 Critical severity
Institute-of-current-students: Improper Neutralization of Special Elements used in an SQL Command
Institute-of-Current-Students v1.0 contains a time-based blind SQL injection vulnerability in the mydetailsstudent.php endpoint. The `myds` GET parameter is not adequately sanitized before being used in SQL queries.
- 9.8 Critical severity
A SQL injection vulnerability exists in the id2 parameter of the cancel_booking.php page in…
A SQL injection vulnerability exists in the id2 parameter of the cancel_booking.php page in Online Artwork and Fine Arts MCA Project 1.0. A remote attacker can inject arbitrary SQL queries, leading to database enumeration and potential remote code execution.
- 9.8 Critical severity
Cloudclassroom-php Project: Improper Neutralization of Special Elements used in an SQL Command
A SQL Injection vulnerability was discovered in the askquery.php file of CloudClassroom-PHP Project v1.0. The squeryx parameter accepts unsanitized input, which is passed directly into backend SQL queries.
- 9.8 Critical severity
Cloudclassroom-php Project: Cleartext Transmission of Sensitive Information
CloudClassroom-PHP-Project v1.0 is affected by an insecure credential transmission vulnerability. The application transmits passwords over unencrypted HTTP during the login process, exposing sensitive credentials to potential interception by network-based atta
- 9.8 Critical severity
Cloudclassroom-php Project: Improper Neutralization of Special Elements used in an SQL Command
CloudClassroom-PHP-Project v1.0 contains a critical SQL Injection vulnerability in the loginlinkadmin.php component. The application fails to sanitize user-supplied input in the admin login form before directly including it in SQL queries. This allows unauthen
- 7.3 High severity
Cloudclassroom-php Project: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in the registrationform endpoint of CloudClassroom-PHP-Project v1.0. The pass parameter is vulnerable due to improper input validation, allowing attackers to inject SQL queries.
- 7.3 High severity
Cloudclassroom-php Project: Improper Neutralization of Special Elements used in an SQL Command
A time-based SQL injection vulnerability exists in mydetailsstudent.php in the CloudClassroom PHP Project 1.0. The myds parameter does not properly validate user input, allowing an attacker to inject arbitrary SQL commands.