CloudClassroom-PHP-Project vulnerabilities

A flaw was found in the CloudClassroom-PHP-Project in an unknown function of manageassessment2.php. Manipulating the ExamName/Q1/Q2/Q3/Q4/Q5 arguments causes cross-site scripting, and the attack can be carried out remotely. The exploit has been published and may be used; the vendor did not respond to the disclosure.

A vulnerability was detected in the CloudClassroom-PHP-Project in an unknown function of viewquery.php. Manipulating the eid argument results in SQL injection, and the attack can be executed remotely. The exploit is now public and may be used; the vendor did not respond to the disclosure.

A security vulnerability was detected in the CloudClassroom-PHP-Project in an unknown function of studentdetails.php. Manipulation leads to execution after redirect, and remote exploitation is possible. The exploit has been publicly disclosed and may be used; the vendor did not respond to the disclosure.

A weakness was identified in the CloudClassroom-PHP-Project in some unknown processing of the Global Session Handler component. Manipulation can lead to session expiration, and the attack may be launched remotely. The attack complexity is high and exploitability is assessed as difficult; the exploit is publicly available and the vendor did not respond to the disclosure.

A cross-site scripting vulnerability was found in the mathurvishal CloudClassroom-PHP-Project in the file updatedetailsfromfaculty.php due to manipulation of the fname argument. The attack can be launched remotely and a public exploit is already available.

A security vulnerability has been detected in mathurvishal CloudClassroom-PHP-Project up to 5dadec098bfbbf3300d60c3494db3fb95b66e7be. Affected is an unknown function of the file updateresultdetails.php. Manipulation of the argument editid leads to SQL injection. The attack can be launched remotely, and the exploit has been disclosed publicly.

A vulnerability was determined in mathurvishal CloudClassroom-PHP-Project up to 5dadec098bfbbf3300d60c3494db3fb95b66e7be affecting an unknown functionality of registrationform.php. Manipulation of the FName/LName/Addrs arguments leads to cross site scripting and can be executed remotely.

A vulnerability has been found in mathurvishal CloudClassroom-PHP-Project up to commit 5dadec098bfbbf3300d60c3494db3fb95b66e7be. An unknown function in updatedetailsfromfaculty.php is affected by SQL injection via the myfid argument. The attack can be launched remotely and the exploit is public.

A flaw has been found in mathurvishal CloudClassroom-PHP-Project up to commit 5dadec098bfbbf3300d60c3494db3fb95b66e7be. An unknown function in addnewstudent.php is affected by SQL injection. The attack can be launched remotely and the exploit is public.

A security vulnerability has been detected in mathurvishal CloudClassroom-PHP-Project up to a specific commit, with SQL injection in updatedetailsfromstudent.php via the eno argument. The attack can be initiated remotely.

A security vulnerability was detected in CloudClassroom-PHP-Project affecting an unknown part of addnewstudent.php. Manipulation of the fname argument leads to cross site scripting, and the attack may be launched remotely. The exploit has been publicly disclosed and may be used; the product uses a rolling release model with no version details.

A weakness has been identified in mathurvishal CloudClassroom-PHP-Project up to 5dadec098bfbbf3300d60c3494db3fb95b66e7be. This impacts an unknown function of the file makeresult.php. Manipulation of the argument makeid causes SQL injection. The attack can be initiated remotely, and the exploit has been made available to the public.

A vulnerability was identified in CloudClassroom-PHP-Project allowing SQL injection in updateguest.php via the gname argument. The attack can be initiated remotely and the exploit is publicly available.

A vulnerability was found in mathurvishal CloudClassroom-PHP-Project up to 5dadec098bfbbf3300d60c3494db3fb95b66e7be affecting an unknown function of loginlinkstudent.php. Manipulation of the umail argument results in missing authentication and can be exploited remotely.

A vulnerability was detected in mathurvishal CloudClassroom-PHP-Project up to 5dadec098bfbbf3300d60c3494db3fb95b66e7be affecting an unknown function. The manipulation results in cross-site request forgery and can be launched remotely.

A SQL injection vulnerability was detected in CloudClassroom-PHP-Project in the viewresult.php file, triggered by manipulating the seno argument. The flaw can be exploited remotely and a public exploit is already available. The product follows a rolling release model, so no specific version details are provided, and the vendor did not respond to the disclosure.

A vulnerability was detected in mathurvishal CloudClassroom-PHP-Project up to a specific commit, with SQL injection in mydetailsfaculty.php via the myfid argument. The attack can be launched remotely.

A weakness has been identified in mathurvishal CloudClassroom-PHP-Project up to 5dadec098bfbbf3300d60c3494db3fb95b66e7be. This affects an unknown function of the file updatequery.php. Executing a manipulation of the argument queryx can lead to cross site scripting. It is possible to launch the attack remotely, and the exploit has been made available to the public.

A SQL injection vulnerability was discovered in mathurvishal CloudClassroom-PHP-Project up to commit 5dadec098bfbbf3300d60c3494db3fb95b66e7be. The unknown function in /updateguest.php is affected, and manipulation of arguments gname/editassid allows remote attacks. The exploit is publicly available.

A cross-site scripting (XSS) vulnerability was found in mathurvishal CloudClassroom-PHP-Project up to commit 5dadec098bfbbf3300d60c3494db3fb95b66e7be. The affected component is Faculty Video Management in managevideos2.php, and manipulation of arguments V_Title/V_Url/V_Remarks allows remote attacks. The exploit is publicly available.

A vulnerability has been found in mathurvishal CloudClassroom-PHP-Project up to 5dadec098bfbbf3300d60c3494db3fb95b66e7be. Affected by this vulnerability is an unknown functionality of the file managevideos2.php. Such manipulation of the argument editassid leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. This product operates on a rolling release basis, ensuring continuous delivery. Consequently, there are no version details for either affected or updated releases. The vendor was contacted early about this disclosure but did not respond in any way.

A flaw was found in the CloudClassroom-PHP-Project in an unknown function of the file updatefaculty.php. Manipulation of the fid argument leads to SQL injection. The attack can be initiated remotely and the exploit has been publicly disclosed.

A vulnerability was detected in mathurvishal CloudClassroom-PHP-Project up to 5dadec098bfbbf3300d60c3494db3fb95b66e7be. This impacts an unknown function of the file updatestudent.php of the component Student Update Functionality. The manipulation of the argument eno results in sql injection. The attack can be launched remotely. The exploit is now public and may be used. This product does not use versioning. This is why information about affected and unaffected releases are unavailable. The vendor was contacted early about this disclosure but did not respond in any way.

A security vulnerability was detected in the CloudClassroom-PHP-Project in an unknown function of the file updatequery.php. Manipulation of the gid argument leads to SQL injection. The attack can be initiated remotely and the exploit has been publicly disclosed.

A weakness was identified in the CloudClassroom-PHP-Project in an unknown function of the file loginlinkfaculty.php of the Faculty Authentication component. Manipulation of the fid/pass arguments leads to SQL injection. The attack can be initiated remotely and the exploit has been publicly disclosed.