CloudClassroom-PHP-Project: SQL injection in facultydetails.php (CVE-2026-121502)
A SQL injection vulnerability exists in the facultydetails.php file of the mathurvishal CloudClassroom-PHP-Project, triggered via the deleteid argument.
CVE search metadata
CVE search record: CVE-2026-121502. Severity: high. CVSS: 7.3. KEV: no. Product: CloudClassroom-PHP-Project. Brief: CloudClassroom-PHP-Project: SQL injection in facultydetails.php (CVE-2026-121502). Brief link: https://feed.craftedsignal.io/briefs/2026-11-cloudclassroom-sql-injection/
Triage facts
Revision 2- Applicability
- CloudClassroom-PHP-Project
- Evidence
- Unknown
- Severity
- High
- Sources
- 2 public sources
- Freshness
- Revision 2Nov 4, 00:47 UTC
- Vulnerabilities
- 1 CVE
- Source quality
- A2Roughly even chance
Revision history 1 entry · Revision 2
- Revision 2
poc_available
Changed: affected_products, affected_vendors, claim_state, cpes, has_poc, lastmod, poc_references, references, updates
Sources: 1
A vulnerability was identified in the mathurvishal CloudClassroom-PHP-Project. The issue involves an unknown function within facultydetails.php, where manipulation of the deleteid argument leads to SQL injection. The attack may be initiated remotely, and a public exploit is available. The product utilizes a rolling release model, so no specific version information for affected or updated releases is available. The vendor was contacted but did not respond.