| शीर्षक | https://github.com/mathurvishal/CloudClassroom-PHP-Project CloudClassroom PHP Project 5dadec098bfbbf3300d60c3494db3fb95b66e7be SQL Injection |
|---|
| विवरण | A flaw has been found in mathurvishal CloudClassroom-PHP-Project up to 5dadec098bfbbf3300d60c3494db3fb95b66e7be. The faculty authentication functionality (loginlinkfaculty.php) due to improper neutralization of user-supplied input in SQL queries. The application constructs authentication queries by directly concatenating the fid (Faculty ID) and pass parameters without using parameterized statements. A remote attacker can exploit this vulnerability to bypass authentication, impersonate arbitrary faculty accounts without valid credentials, and establish authenticated sessions. Under certain conditions, successful exploitation may also allow SQL query manipulation that injects attacker-controlled data into session variables, leading to Cross-Site Scripting (XSS) in authenticated pages that render unsanitized session data.
|
|---|
| स्रोत | ⚠️ https://github.com/smithbraz/PoC-CloudClassroom-AuthBypass |
|---|
| उपयोगकर्ता | smithbraz (UID 100334) |
|---|
| सबमिशन | 04/08/2026 02:51 AM (2 महीनों पहले) |
|---|
| संयम | 25/09/2026 11:06 AM (2 months later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 409901 [mathurvishal CloudClassroom-PHP-Project तक 5dadec098bfbbf3300d60c3494db3fb95b66e7be Faculty Authentication loginlinkfaculty.php fid/pass SQL इंजेक्शन] |
|---|
| अंक | 20 |
|---|