A security flaw has been discovered in mathurvishal CloudClassroom-PHP-Project up to...
zetlyn/cve-ghsa vulnerability ghsa GHSA-hhpf-rfcr-8fx8 cve CVE-2026-100312 known 2026-09-26
https://github.com/advisories/GHSA-hhpf-rfcr-8fx8
Properties
| cvss | 6.3receipt
This source has not kept a receipt for this claim yet. The next update that reads it will. |
|---|---|
| cwe | CWE-74receipt
This source has not kept a receipt for this claim yet. The next update that reads it will. |
| severity | low Below 4.0. receipt
This source has not kept a receipt for this claim yet. The next update that reads it will. |
Text
A security flaw has been discovered in mathurvishal CloudClassroom-PHP-Project up to...
A security flaw has been discovered in mathurvishal CloudClassroom-PHP-Project up to 5dadec098bfbbf3300d60c3494db3fb95b66e7be. The impacted element is an unknown function of the file /updateguest.php. Performing a manipulation of the argument gname/editassid results in sql injection. It is possible to initiate the attack remotely. The exploit has been released to the public and may be used for attacks. This product is using a rolling release to provide continious delivery. Therefore, no version details for affected nor updated releases are available. The vendor was contacted early about this disclosure but did not respond in any way.