CVE-2026-121502: mathurvishal CloudClassroom-PHP-Project facultydetails.php sql injection
A vulnerability was identified in mathurvishal CloudClassroom-PHP-Project. The impacted element is an unknown function of the file facultydetails.php. The manipulation of the argument deleteid leads to sql injection. The attack may be initiated remotely. The exploit is publicly available and might be used. This product uses a rolling release model to deliver continuous updates. As a result, specific version information for affected or updated releases is not available. The vendor was contacted early about this disclosure but did not respond in any way.
Event History
Frequently Asked Questions
Who can exploit this issue?
The attack can be initiated remotely and requires no privileges or user interaction, according to the provided vector. A public exploit is available, which increases the likelihood of attempted exploitation.
What input should defenders investigate?
Investigate requests reaching facultydetails.php that supply the deleteid argument. The reported weakness is SQL injection through manipulation of that parameter.
Are fixed or affected versions known?
No specific affected or updated versions are available because the product uses a rolling release model. The vendor was contacted but did not respond.