CVE-2026-100874: mathurvishal CloudClassroom-PHP-Project addnewstudent.php sql injection
A flaw has been found in mathurvishal CloudClassroom-PHP-Project up to 5dadec098bfbbf3300d60c3494db3fb95b66e7be. This affects an unknown function of the file addnewstudent.php. This manipulation causes sql injection. The attack may be initiated remotely. The exploit has been published and may be used. This product uses a rolling release model to deliver continuous updates. As a result, specific version information for affected or updated releases is not available. The vendor was contacted early about this disclosure but did not respond in any way.
Affected Software
Event History
Frequently Asked Questions
Who can exploit this issue?
The attack can be initiated remotely and requires no privileges or user interaction according to the supplied severity vector. Systems exposing the affected addnewstudent.php functionality are the relevant attack surface.
Is public exploit code available?
Yes. The exploit has been published and may be used, which increases the likelihood of exploitation attempts.
Which versions are affected or fixed?
The issue affects CloudClassroom-PHP-Project through commit 5dadec098bfbbf3300d60c3494db3fb95b66e7be. Because the product uses a rolling release model, specific affected and fixed release versions are not available.
Is a vendor fix or advisory available?
The provided data does not identify a vendor fix or response. The vendor was contacted before disclosure but did not respond.