SQL Injection Vulnerability in mathurvishal CloudClassroom-PHP-Project

CVE-2026-100314

What is CVE-2026-100314?

A significant security vulnerability exists in the mathurvishal CloudClassroom-PHP-Project that affects the updatedetailsfromstudent.php file. This vulnerability allows for SQL injection through improper handling of the argument 'eno'. Attackers can exploit this flaw remotely, potentially compromising the integrity and confidentiality of the database. The vendor has not responded to disclosures about this issue, raising concerns regarding the ongoing safety and security of the application as it employs continuous delivery with rolling releases, making it difficult to ascertain specific affected or updated versions.

References