SQL Injection Vulnerability in CloudClassroom-PHP-Project by Mathurvishal
CVE-2026-2058
Key Information:
- Vendor
Mathurvishal
- Vendor
- CVE Published:
- 6 February 2026
Badges
What is CVE-2026-2058?
A vulnerability has been discovered in the CloudClassroom-PHP-Project developed by Mathurvishal, specifically within the /postquerypublic.php file. This flaw allows for SQL injection through manipulation of the 'gnamex' argument. The vulnerability enables remote attackers to execute arbitrary SQL queries, potentially compromising database integrity and confidentiality. Despite attempts to communicate with the vendor regarding this issue, no response has been received. Given the rolling release strategy employed by the vendor, users are advised to implement strong security measures and monitor for any related updates or mitigations.
Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.
Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.
Affected Version(s)
CloudClassroom-PHP-Project 5dadec098bfbbf3300d60c3494db3fb95b66e7be
Exploit Proof of Concept (PoC)
PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.
References
CVSS V4
Timeline
- 🟡
Public PoC available
- 👾
Exploit known to exist
Vulnerability published
Vulnerability Reserved