A vulnerability was detected in mathurvishal CloudClassroom-PHP-Project up to 5dadec098bfbbf3300d60c3494db3fb95b66e7be. This impacts an unknown function of the file updatestudent.php of the component Student Update Functionality. The manipulation of the argument eno results in sql injection.
The attack can be launched remotely. The exploit is now public and may be used. This product does not use versioning.
This is why information about affected and unaffected releases are unavailable. The vendor was contacted early about this disclosure but did not respond in any way.
Attack Parameters
Attack Vector
Network
Can be exploited remotely
Attack Complexity
Low
Easy to exploit
Attack Requirements
None
No additional conditions
Privileges Required
Low
Basic privileges needed
User Interaction
None
No user interaction needed
Impact Assessment
Confidentiality
Low
Partial data leak
Integrity
Low
Partial data modification
Availability
Low
Partial disruption
CVSS Vector v4.0
Weakness Type (CWE)
Vulnerable Products
mathurvishal:cloudclassroom-php-project
References 5
https://vuldb.com/vuln/409903
VDB-409903 | mathurvishal CloudClassroom-PHP-Project Student Update Functionality updatestudent.php sql injection
https://vuldb.com/vuln/409903/cti
VDB-409903 | CTI Indicators (IOB, IOC, TTP, IOA)
https://vuldb.com/cve/CVE-2026-97884
CVE-2026-97884 | CVE Analysis and Report
https://vuldb.com/submit/914563
Submit #914563 | https://github.com/mathurvishal/CloudClassroom-PHP-Project CloudClassroom PHP Project 5dadec098bfbbf3300d60c3494db3fb95b66e7be SQL Injection
https://github.com/hofuman/CVE/blob/main/README.md
NVD