SQL Injection Vulnerability in mathurvishal CloudClassroom-PHP-Project
CVE-2026-120342

6.9MEDIUM

Key Information:

Vendor: Mathurvishal
Status: Cloudclassroom-PHP-project
Vendor: CVE Published:; 2 November 2026

🔔 Create Mathurvishal Vulnerability Alert

Badges

👾 Exploit Exists🟡 Public PoC

What is CVE-2026-120342?

A vulnerability has been identified in mathurvishal CloudClassroom-PHP-Project, specifically related to the viewquery.php file. The issue stems from an unknown function that improperly handles the 'eid' argument, leading to potential SQL injection attacks. This flaw allows remote attackers to execute malicious SQL code that could compromise the integrity of the database. As the exploit has been made public, it poses a significant risk to users, especially since ongoing release management means specific version information for affected releases is not available. The vendor has not responded to disclosures regarding this vulnerability.

Affected Version(s)

CloudClassroom-PHP-Project 5dadec098bfbbf3300d60c3494db3fb95b66e7be

CloudClassroom-PHP-Project c46ce5736007d9d6e51a8feeb9250729fe85f139

CloudClassroom-PHP-Project dae0c5961a35a4faf28cde9e02117538f09f81c1

Exploit Proof of Concept (PoC)

PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.

CVE-2026-120342 - Proof of Concept