Is CVE-2026-100315 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2026-100315 being exploited in the wild.

How severe is CVE-2026-100315?

High severity, with a CVSS score of 7.3, published 26 September 2026.

Which products and versions are affected?

Mathurvishal CloudClassroom PHP Project up to commit 5dadec098bfbbf3300d60c3494db3fb95b66e7be.

Is there a fix for CVE-2026-100315?

No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

How is CVE-2026-100315 attacked?

It is attacked over the network, in a software library.

Am I affected by CVE-2026-100315?

Check whether you run Mathurvishal CloudClassroom PHP Project at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2026-100315: mathurvishal CloudClassroom-PHP-Project SQL injection in mydetailsfaculty.php

CVE-2026-100315 · Severity: high · CVSS 7.3 · Published 2026-09-26

CloudClassroom is a PHP-based classroom management application. A SQL injection vulnerability in the mydetailsfaculty.php file allows remote attackers to manipulate the myfid parameter and execute arbitrary SQL queries, potentially leading to unauthorized database access, data theft, or modification. The vulnerability has been publicly disclosed and no vendor response has been received.

Technologies: Mathurvishal CloudClassroom PHP Project. Vendors: Mathurvishal.

Quick answers

Is CVE-2026-100315 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2026-100315 being exploited in the wild.
How severe is CVE-2026-100315?: High severity, with a CVSS score of 7.3, published 26 September 2026.
Which products and versions are affected?: Mathurvishal CloudClassroom PHP Project up to commit 5dadec098bfbbf3300d60c3494db3fb95b66e7be.
Is there a fix for CVE-2026-100315?: No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.
How is CVE-2026-100315 attacked?: It is attacked over the network, in a software library.
Am I affected by CVE-2026-100315?: Check whether you run Mathurvishal CloudClassroom PHP Project at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Technical details

A SQL injection vulnerability exists in the mydetailsfaculty.php file where the myfid parameter is not properly sanitized before being used in SQL queries. The vulnerability can be exploited remotely without authentication via the myfid argument, allowing attackers to extract sensitive data or manipulate database contents. No patched version is available as the product does not use versioning.

Affected products

mathurvishal CloudClassroom-PHP-Project up to commit 5dadec098bfbbf3300d60c3494db3fb95b66e7be

Timeline

2026-09-26: disclosed
other: Exploit is public and may be used

References

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.