Description

A vulnerability was detected in mathurvishal CloudClassroom-PHP-Project up to 5dadec098bfbbf3300d60c3494db3fb95b66e7be. This impacts an unknown function of the file viewresult.php. Performing a manipulation of the argument seno results in sql injection. Remote exploitation of the attack is possible. The exploit is now public and may be used. This product follows a rolling release approach for continuous delivery, so version details for affected or updated releases are not provided. The vendor was contacted early about this disclosure but did not respond in any way.

Executive Summary

Technical Details

Mitigations

References

Additional Metadata

{
  "score": "7.3",
  "pubDate": "2026-09-26T22:16:31.207Z",
  "pubdate": "2026-09-26T22:16:31.207Z",
  "executiveSummary": "A critical SQL injection vulnerability exists in the mathurvishal CloudClassroom-PHP-Project, affecting the viewresult.php file.\nThe vulnerability allows unauthenticated remote attackers to manipulate the 'seno' parameter, leading to unauthorized database queries.\nImpact includes potential unauthorized access to sensitive data, data exfiltration, modification, or complete database compromise.\nGiven that the exploit is public and the vendor remains unresponsive, the risk is severe.\nSuccessful exploitation requires no specialized authentication, enabling remote actors to execute arbitrary SQL commands directly against the backend database.",
  "technicalDetails": "The vulnerability resides within the viewresult.php file of the mathurvishal CloudClassroom-PHP-Project, specifically affecting the 'seno' input parameter.\nThe root cause is the failure to properly sanitize and parameterize user-supplied input before incorporating it into a database query.\nThe application directly concatenates the 'seno' argument into a SQL statement, violating secure coding practices that mandate the use of prepared statements or parameterized queries.\nAn attacker can exploit this flaw by crafting malicious input for the 'seno' argument, injecting arbitrary SQL syntax into the application's query structure.\nThe exploitation flow initiates when a remote attacker submits a crafted HTTP request containing the malicious payload in the 'seno' argument to viewresult.php.\nThe application processes this input without validation, altering the intended logic of the SQL query. For instance, an attacker could use UNION-based techniques to append results from other tables to the legitimate output, or use blind SQL injection to infer database contents byte-by-byte through conditional responses.\nSince the project follows a rolling release model, all versions up to commit 5dadec098bfbbf3300d60c3494db3fb95b66e7be are considered vulnerable.\nThis vulnerability is remotely exploitable over the network without requiring any prior authentication, significantly lowering the bar for exploitation.\nPost-exploitation impact is severe, potentially allowing for the extraction of entire database tables, including user credentials or sensitive classroom data. Depending on the database configuration and permissions, an attacker might also be able to modify or delete data, or in some scenarios, escalate to further compromise the underlying database server."
}