{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/cpes/cpe2.3amathurvishalcloudclassroom-php-project/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":["cpe:2.3:a:mathurvishal:cloudclassroom_php_project:*:*:*:*:*:*:*:*","cpe:2.3:a:mathurvishal:cloudclassroom-php-project:*:*:*:*:*:*:*:*"],"_cs_cves":[{"cvss":7.3,"id":"CVE-2026-120341"},{"cvss":7.3,"id":"CVE-2026-120342"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["CloudClassroom-PHP-Project"],"_cs_severities":["high"],"_cs_tags":[],"_cs_type":"advisory","_cs_vendors":["mathurvishal"],"content_html":"\u003cp\u003eA security vulnerability exists in the studentdetails.php file of the CloudClassroom-PHP-Project application. The flaw enables remote execution after redirect. Public exploit code is available for this vulnerability. As the project follows a rolling release model, no specific affected or fixed version information is currently available. The vendor has not responded to disclosure attempts.\u003c/p\u003e\n\u003ch2 id=\"impact\"\u003eImpact\u003c/h2\u003e\n\u003cp\u003eThe vulnerability allows for remote exploitation, potentially leading to unauthorized execution within the web application context.\u003c/p\u003e\n\u003ch2 id=\"recommendation\"\u003eRecommendation\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eIdentify all instances of the CloudClassroom-PHP-Project within the enterprise environment.\u003c/li\u003e\n\u003cli\u003eImplement access control restrictions to limit public access to the studentdetails.php endpoint.\u003c/li\u003e\n\u003cli\u003eMonitor web server access logs for anomalous requests to studentdetails.php that precede redirected responses or suspicious subsequent requests.\u003c/li\u003e\n\u003cli\u003eEvaluate the necessity of the application given the lack of vendor response and absence of formal patch management in a rolling release model.\u003c/li\u003e\n\u003c/ul\u003e\n","date_modified":"2026-11-02T19:48:03Z","date_published":"2026-11-02T07:17:12Z","id":"https://feed.craftedsignal.io/briefs/2026-11-cloudclassroom-php-vuln/","summary":"A remote execution after redirect vulnerability in the studentdetails.php file of the CloudClassroom-PHP-Project application allows for remote exploitation via publicly available exploit code.","title":"mathurvishal CloudClassroom-PHP-Project: Execution After Redirect (CVE-2026-120341)","url":"https://feed.craftedsignal.io/briefs/2026-11-cloudclassroom-php-vuln/"}],"language":"en","title":"CraftedSignal Threat Feed - Cpe:2.3:a:mathurvishal:cloudclassroom-Php-Project:*:*:*:*:*:*:*:*","version":"https://jsonfeed.org/version/1.1"}