SQL Injection Vulnerability in CloudClassroom-PHP Project
CVE-2025-44608

6.5MEDIUM

Key Information:

Vendor: CloudClassroom
Status: CloudClassroom-PHP Project
Vendor: CVE Published:; 25 July 2025

🔔 Create CloudClassroom Vulnerability Alert

What is CVE-2025-44608?

The CloudClassroom-PHP Project v1.0 has been identified with a SQL injection vulnerability in the viewid parameter. This flaw can be exploited by attackers to execute arbitrary SQL commands, potentially leading to unauthorized access to sensitive data. It is crucial for users and administrators of this software to apply appropriate security measures and updates to mitigate the risks posed by this vulnerability.

References

https://github.com/mr-xmen786/CVE-2025-44608

CVSS V3.1

Score:

6.5

Severity:

MEDIUM

Confidentiality:

Low

Integrity:

Low

Availability:

Low

Attack Vector:

Network

Attack Complexity:

Low

Privileges Required:

None

User Interaction:

None

Scope:

Unchanged

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Jul 25, 2025
Vulnerability Reserved
Apr 22, 2025

CVE-2025-44608 Data

JSON