Detections
Analytics
CVE-2025-26198
critical
Description
CloudClassroom-PHP-Project v.1.0 is vulnerable to SQL Injection in loginlinkadmin.php, allowing unauthenticated attackers to bypass authentication and gain administrative access. The application fails to properly sanitize user inputs before constructing SQL queries, enabling an attacker to manipulate database queries via specially crafted payloads
References
https://gist.github.com/tansique-17/0776791b8edd4931216be452a6971f5e