Cpe:2.3:a:mathurvishal:cloudclassroom-Php-Project:*:*:*:*:*:*:*:* - CraftedSignal Threat Feedhttps://feed.craftedsignal.io/cpes/cpe2.3amathurvishalcloudclassroom-php-project/Trending threats, MITRE ATT&CK coverage, and detection metadata. Fed continuously.Hugoenhello@craftedsignal.iohello@craftedsignal.ioMon, 02 Nov 2026 07:17:12 +0000https://feed.craftedsignal.io/favicon-32x32.pngCraftedSignal Threat Feedhttps://feed.craftedsignal.io/3232https://feed.craftedsignal.io/favicon.svgmathurvishal CloudClassroom-PHP-Project: Execution After Redirect (CVE-2026-120341)https://feed.craftedsignal.io/briefs/2026-11-cloudclassroom-php-vuln/Mon, 02 Nov 2026 07:17:12 +0000hello@craftedsignal.iohttps://feed.craftedsignal.io/briefs/2026-11-cloudclassroom-php-vuln/A remote execution after redirect vulnerability in the studentdetails.php file of the CloudClassroom-PHP-Project application allows for remote exploitation via publicly available exploit code.A security vulnerability exists in the studentdetails.php file of the CloudClassroom-PHP-Project application. The flaw enables remote execution after redirect. Public exploit code is available for this vulnerability. As the project follows a rolling release model, no specific affected or fixed version information is currently available. The vendor has not responded to disclosure attempts.

Impact

The vulnerability allows for remote exploitation, potentially leading to unauthorized execution within the web application context.

Recommendation

  • Identify all instances of the CloudClassroom-PHP-Project within the enterprise environment.
  • Implement access control restrictions to limit public access to the studentdetails.php endpoint.
  • Monitor web server access logs for anomalous requests to studentdetails.php that precede redirected responses or suspicious subsequent requests.
  • Evaluate the necessity of the application given the lack of vendor response and absence of formal patch management in a rolling release model.
]]>highadvisory