Skip to content
SQL Injection Vulnerability in CloudClassroom-PHP Project

SQL Injection Vulnerability in CloudClassroom-PHP Project

First seen 4 Nov 2026, 02:48 UTC • •
API

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •November 4, 2026 at 02:49 UTC
  • •CVE-2026-121502 allows SQL injection via deleteid in facultydetails.php.
  • •The vulnerability is remotely exploitable with a publicly available exploit.
  • •No vendor response or patch has been issued, increasing urgency for affected users.

A SQL injection vulnerability, CVE-2026-121502, has been identified in the mathurvishal CloudClassroom-PHP-Project, specifically in the facultydetails.php file. The vulnerability arises from the manipulation of the deleteid argument, allowing remote attackers to exploit the flaw without authentication. The exploit is publicly available, increasing the risk of opportunistic attacks. The vendor has not responded to early disclosure attempts, and there is no confirmed fix available. Affected users include those with internet-facing deployments of the application, particularly self-hosted instances. Successful exploitation could lead to unauthorized data exposure or alteration, impacting student and faculty records. Security professionals are advised to monitor logs for unusual requests and restrict access to the vulnerable function until a patch is available.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated 2h ago How this analysis works

Timeline

2026-11-03
CVE-2026-121502 published
A SQL injection vulnerability was disclosed affecting the mathurvishal CloudClassroom-PHP-Project.
Sploitus
2026-11-04
CVE-2026-121502 alert issued
Redpacketsecurity issued an alert highlighting the risk of the SQL injection vulnerability and advised immediate investigation.
Redpacketsecurity

More articles in this cluster (6)

Following this threat?

Track CVE-2026-121502 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Extracted Entities (5)

1 / 4

Common questions

What is CVE-2026-121502?
It is a SQL injection vulnerability in the mathurvishal CloudClassroom-PHP-Project affecting the facultydetails.php file.
How can I mitigate this vulnerability?
Restrict access to the affected function and monitor logs for unusual activity until a patch is available.
Is there a patch available for this vulnerability?
No, the vendor has not issued a patch or confirmed a fix for CVE-2026-121502.