SQL Injection Vulnerability in CloudClassroom-PHP-Project by CloudClassroom
CVE-2025-50868

6.5MEDIUM

Key Information:

Vendor

CloudClassroom

Status
CloudClassroom-PHP-Project
Vendor
CVE Published:
1 August 2025

What is CVE-2025-50868?

A security weakness has been identified in the takeassessment2.php file of CloudClassroom-PHP-Project 1.0, where the Q4 POST parameter is inadequately sanitized. This lapse allows attackers to execute arbitrary SQL queries, which could lead to unauthorized access to sensitive data and impact data integrity. Proper validation and sanitation of input parameters are essential to mitigate such threats.

References

https://gist.github.com/b0mk35h/393a5491ef82fe0ede9207e4b...

CVSS V3.1

Score:
6.5
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.