CloudClassroom-PHP-Project v1.0 contains a critical SQL Injection vulnerability in the loginlinkadmin.php component. The application fails to sanitize user-supplied input in the admin login form before directly including it in SQL queries. This allows unauthenticated attackers to inject arbitrary SQL payloads and bypass authentication, gaining unauthorized administrative access. The vulnerability is triggered when an attacker supplies specially crafted input in the username field, such as ' OR '1'='1, leading to complete compromise of the login mechanism and potential exposure of sensitive backend data.
The application does not filter user input entered in the administrator login form before placing it directly in the SQL query. An attacker can enter a specially crafted payload in the username field — for example ' OR '1'='1 — which causes the SQL query to always return a positive result. As a result, the authentication mechanism is completely bypassed and the attacker gains an administrative session.
An attacker without any privileges can obtain full administrative access to the application and potentially read sensitive data stored in the backend database.
Apply patches available from the vendor according to the references. As an immediate workaround, it is recommended to implement validation and parameterization of SQL queries (prepared statements) and restrict access to the administration panel at the network or firewall level.
CloudClassroom-PHP-Project v1.0 (loginlinkadmin.php component)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HVishalmathur Cloudclassroom PHP Project
APPVishalmathur1.0
Related vulnerabilities
SQL Injection w CloudClassroom-PHP — plik askquery.php
Nieszyfrowana transmisja danych logowania w CloudClassroom-PHP-Project
SQL injection vulnerability in the registrationform endpoint of CloudClassroom-PHP-Project v1.0. The pass para...
A time-based SQL injection vulnerability exists in mydetailsstudent.php in the CloudClassroom PHP Project 1.0....
CloudClassroom-PHP Project v1.0 was discovered to contain a SQL injection vulnerability via the viewid paramet...