PT-2025-23532 · Unknown · Cloudclassroom-Php Project
Sanjay Singh
·
Published
2025-06-02
·
Updated
2025-06-13
·
CVE-2025-45542
CVSS v3.1
7.3
High
| Vector | AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L |
Name of the Vulnerable Software and Affected Versions
CloudClassroom-PHP-Project version 1.0
Description
A SQL injection vulnerability exists in the registrationform endpoint of CloudClassroom-PHP-Project due to improper input validation, allowing attackers to inject SQL queries. The
pass parameter is specifically vulnerable. This issue risks remote data theft and authentication bypass.Recommendations
As a temporary workaround, consider using prepared statements and sanitization to mitigate the risk of SQL injection.
Restrict access to the
registrationform endpoint to minimize the risk of exploitation.
Avoid using the pass parameter in the affected endpoint until the issue is resolved.
Update the software to a version that includes a fix for this issue, once available.Exploit
Fix
SQL injection
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Cloudclassroom-Php Project