| शीर्षक | https://github.com/mathurvishal/CloudClassroom-PHP-Project CloudClassroom PHP Project 5dadec098bfbbf3300d60c3494db3fb95b66e7be SQL Injection |
|---|
| विवरण | A security flaw was discovered in the mathurvishal CloudClassroom-PHP-Project, affecting all versions up to commit 5dadec098bfbbf3300d60c3494db3fb95b66e7be. The issue exists within the updateguest.php file because the gname parameter is processed without proper input validation or safe data separation.
The updateguest.php endpoint allows remote authenticated attackers to inject arbitrary SQL statements via the editassid parameter during video updates, due to improper input validation. |
|---|
| स्रोत | ⚠️ https://github.com/JaconiasDev/Advisory-CloundClassroom-PHP-Project-1.0 |
|---|
| उपयोगकर्ता | Falcon09 (UID 100306) |
|---|
| सबमिशन | 04/08/2026 03:58 AM (2 महीनों पहले) |
|---|
| संयम | 25/09/2026 09:10 PM (2 months later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 410440 [mathurvishal CloudClassroom-PHP-Project तक 5dadec098bfbbf3300d60c3494db3fb95b66e7be /updateguest.php gname/editassid SQL इंजेक्शन] |
|---|
| अंक | 20 |
|---|