| Title | mathurvishal CloudClassroom-PHP-Project 5dadec098bfbbf3300d60c3494db3fb95b66e7be SQL Injection (UNION-based / error-based) |
|---|
| Description | A vulnerability was found in CloudClassroom-PHP-Project 1.0. It has been classified as **Critical**.
This issue affects the component `viewquery.php` via the argument `eid`.
Parameter `eid` is interpolated in quotes in SELECT query. Closing the quote allows `UNION SELECT`. Target table exposes 4 columns. Confirmed with unauthenticated admin credential dump.
The manipulation leads to sql injection. The attack may be initiated remotely.
|
|---|
| Source | ⚠️ https://github.com/luan-oliveira01/Advisory-CloudClassroom-PHP-Project-1.0/tree/main/viewquery-sqli |
|---|
| User | virgulino (UID 100172) |
|---|
| Submission | 10/06/2026 19:45 (1 month ago) |
|---|
| Moderation | 11/01/2026 16:39 (26 days later) |
|---|
| Status | Accepted |
|---|
| VulDB entry | 429667 [mathurvishal CloudClassroom-PHP-Project viewquery.php eid sql injection] |
|---|
| Points | 20 |
|---|