Cloudclassroom-php Project vulnerabilities
5 known vulnerabilities in Cloudclassroom-php Project from Vishalmathur. 5 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 9.8 Critical severity
Cloudclassroom-php Project: Improper Neutralization of Special Elements used in an SQL Command
A SQL Injection vulnerability was discovered in the askquery.php file of CloudClassroom-PHP Project v1.0. The squeryx parameter accepts unsanitized input, which is passed directly into backend SQL queries.
- 9.8 Critical severity
Cloudclassroom-php Project: Cleartext Transmission of Sensitive Information
CloudClassroom-PHP-Project v1.0 is affected by an insecure credential transmission vulnerability. The application transmits passwords over unencrypted HTTP during the login process, exposing sensitive credentials to potential interception by network-based atta
- 9.8 Critical severity
Cloudclassroom-php Project: Improper Neutralization of Special Elements used in an SQL Command
CloudClassroom-PHP-Project v1.0 contains a critical SQL Injection vulnerability in the loginlinkadmin.php component. The application fails to sanitize user-supplied input in the admin login form before directly including it in SQL queries. This allows unauthen
- 7.3 High severity
Cloudclassroom-php Project: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in the registrationform endpoint of CloudClassroom-PHP-Project v1.0. The pass parameter is vulnerable due to improper input validation, allowing attackers to inject SQL queries.
- 7.3 High severity
Cloudclassroom-php Project: Improper Neutralization of Special Elements used in an SQL Command
A time-based SQL injection vulnerability exists in mydetailsstudent.php in the CloudClassroom PHP Project 1.0. The myds parameter does not properly validate user input, allowing an attacker to inject arbitrary SQL commands.