CVE-2025-26198 Information

Jun 19, 2025 cve

Description

CloudClassroom-PHP-Project v.1.0 is vulnerable to SQL Injection in loginlinkadmin.php allowing unauthenticated attackers to bypass authentication and gain administrative access. The application fails to properly sanitize user inputs before constructing SQL queries enabling an attacker to manipulate database queries via specially crafted payloads

Reference

https://gist.github.com/tansique-17/0776791b8edd4931216be452a6971f5e

CNNVD-202506-2550 (Published: 2025-06-18)

Share on: