SQL Injection Vulnerability in mathurvishal CloudClassroom Faculty Authentication

CVE-2026-97882

What is CVE-2026-97882?

A vulnerability exists in the mathurvishal CloudClassroom-PHP-Project that allows for SQL injection through the Faculty Authentication component. This vulnerability specifically resides in the 'loginlinkfaculty.php' file, where improper handling of user input in the form of arguments 'fid/pass' can lead to unauthorized database access. As the attack can be executed remotely, malicious actors could exploit this flaw without needing physical access to the system. The exploit code has been publicly disclosed, raising concerns for users of affected versions. Despite notifications sent to the vendor regarding this issue, there has been no response, leaving potential victims in a precarious position.

References