Executive brief
CloudClassroom-PHP Project, a web-based classroom management application, contains a security flaw in how it handles database queries. An attacker can exploit this to gain unauthorized access to information or potentially take control of the underlying server. This could lead to the theft of student or teacher data and a complete disruption of the educational service.
Technical details
A SQL injection vulnerability exists in CloudClassroom-PHP Project v1.0 due to improper neutralization of the 'viewid' parameter. An unauthenticated remote attacker can supply malicious SQL commands via a crafted URL (e.g., appending a single quote to the parameter) to trigger database errors or manipulate queries. According to researcher reports, this vulnerability can be further escalated to Remote Code Execution (RCE) by using the SQL injection to upload a malicious PHP shell to the web server. This allows for full system command execution under the context of the web server user.
Affected products
- Vishal Mathur CloudClassroom-PHP Project 1.0
Timeline
- 2025-07-25: disclosed
- 2025-07-25: advisory