mathurvishal CloudClassroom-PHP-Project: Execution After Redirect (CVE-2026-120341)
A remote execution after redirect vulnerability in the studentdetails.php file of the CloudClassroom-PHP-Project application allows for remote exploitation via publicly available exploit code.
CVE search metadata
CVE search record: CVE-2026-120341. Severity: high. CVSS: 7.3. KEV: no. Product: CloudClassroom-PHP-Project. Brief: mathurvishal CloudClassroom-PHP-Project: Execution After Redirect (CVE-2026-120341). Brief link: https://feed.craftedsignal.io/briefs/2026-11-cloudclassroom-php-vuln/
Triage facts
Revision 1- Applicability
- CloudClassroom-PHP-Project
- Evidence
- Unknown
- Severity
- High
- Action
- Elevated
- Sources
- 1 public source
- Freshness
- Revision 1Nov 2, 07:17 UTC
- Vulnerabilities
- 1 CVE
- Source quality
- A2Roughly even chance
A security vulnerability exists in the studentdetails.php file of the CloudClassroom-PHP-Project application. The flaw enables remote execution after redirect. Public exploit code is available for this vulnerability. As the project follows a rolling release model, no specific affected or fixed version information is currently available. The vendor has not responded to disclosure attempts.
Impact
The vulnerability allows for remote exploitation, potentially leading to unauthorized execution within the web application context.
Recommendation
- Identify all instances of the CloudClassroom-PHP-Project within the enterprise environment.
- Implement access control restrictions to limit public access to the studentdetails.php endpoint.
- Monitor web server access logs for anomalous requests to studentdetails.php that precede redirected responses or suspicious subsequent requests.
- Evaluate the necessity of the application given the lack of vendor response and absence of formal patch management in a rolling release model.
Immediate actions
Inventory all deployments of mathurvishal CloudClassroom-PHP-Project.
Threat Hunt
Search web access logs for requests to /studentdetails.php that are followed by unexpected redirects or subsequent abnormal application behavior.
Data: Web server access logs (cs-uri-stem, cs-method, sc-status, sc-location)
Mitigations
Restrict network access to studentdetails.php via WAF or web server configuration until a security assessment or update is available.
CVE-2026-120341