SQL Injection Vulnerability in CloudClassroom PHP Project
CVE-2024-57459

7.3HIGH

Key Information:

Vendor

CloudClassroom

Status
CloudClassroom PHP Project
Vendor
CVE Published:
2 June 2025

What is CVE-2024-57459?

The identified vulnerability in the CloudClassroom PHP Project stems from improper input validation in the mydetailsstudent.php file. Specifically, the myds parameter does not adequately filter user inputs, enabling an attacker to execute arbitrary SQL commands. This exploitation could lead to unauthorized access or manipulation of the database, posing a significant risk to data integrity and confidentiality.

References

https://owasp.org/www-community/attacks/SQL_Injection
https://gist.github.com/b0mk35h/921cfa00f9ea1af6664557453...

CVSS V3.1

Score:
7.3
Severity:
HIGH
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.