HIGH🇵🇱 Wersja polska

CVE-2024-57459

CVSS 7.3v3.1pub. 2025-06-02upd. 2025-06-13

A time-based SQL injection vulnerability exists in mydetailsstudent.php in the CloudClassroom PHP Project 1.0. The myds parameter does not properly validate user input, allowing an attacker to inject arbitrary SQL commands.

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

  • Vishalmathur Cloudclassroom PHP Project

    APP
    Vishalmathur
    1.0
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
Tags
SQLi
CWE
References

Related vulnerabilities

CVE-2025-46179CRITICAL9.8PL ✓same product

SQL Injection w CloudClassroom-PHP — plik askquery.php

CVE-2025-26198CRITICAL9.8PL ✓same product

SQL Injection w CloudClassroom-PHP — ominięcie uwierzytelnienia admina

CVE-2025-26199CRITICAL9.8PL ✓same product

Nieszyfrowana transmisja danych logowania w CloudClassroom-PHP-Project

CVE-2025-45542HIGH7.3same product

SQL injection vulnerability in the registrationform endpoint of CloudClassroom-PHP-Project v1.0. The pass para...

CVE-2025-44608MEDIUM6.5same product

CloudClassroom-PHP Project v1.0 was discovered to contain a SQL injection vulnerability via the viewid paramet...