CVE-2026-100315: mathurvishal CloudClassroom-PHP-Project mydetailsfaculty.php sql injection
A vulnerability was detected in mathurvishal CloudClassroom-PHP-Project up to 5dadec098bfbbf3300d60c3494db3fb95b66e7be. Affected is an unknown function of the file mydetailsfaculty.php. The manipulation of the argument myfid results in sql injection. The attack can be launched remotely. The exploit is now public and may be used. This product does not use versioning. This is why information about affected and unaffected releases are unavailable. The vendor was contacted early about this disclosure but did not respond in any way.
Affected Software
Event History
Frequently Asked Questions
Who can exploit this issue?
The issue can be exploited remotely and requires no privileges or user interaction. A public exploit is available, which increases the likelihood of attempted exploitation against reachable deployments.
Which deployments should be treated as potentially affected?
Deployments containing the vulnerable mydetailsfaculty.php code should be treated as potentially affected, particularly where the myfid argument is externally controllable. The product does not use versioning, so affected and unaffected releases cannot be identified from release numbers.
What can be done if a code fix is not immediately available?
Restrict remote access to the application or to the affected functionality where possible, and limit access to trusted users or networks. Review and protect requests reaching mydetailsfaculty.php, especially those supplying the myfid argument.
How can defenders look for exploitation attempts?
Review web and application logs for requests to mydetailsfaculty.php that include unusual or malformed myfid values. Investigate requests attempting SQL syntax or unexpected input in that argument.