CVE-2026-121502: A vulnerability was identified in mathurvishal CloudClassroom-PHP-Project

Routine

HIGH 7.3DOWNGRADE

CVE-2026-121502 is a high-severity flaw (CVSS 7.3) affecting cloudclassroom-php-project. Below: why it ranks where it does, which versions are affected, what to do, and the exact commands.

A vulnerability was identified in mathurvishal CloudClassroom-PHP-Project. The impacted element is an unknown function of the file facultydetails.php. The manipulation of the argument deleteid leads to sql injection. The attack may be initiated remotely. The exploit is publicly available and might be used. This product uses a rolling release model to deliver continuous updates. As a result, specific version information for affected or updated rel

Why this priority

High severity

No fix is published yet: follow the downgrade or mitigation steps.

Risk facts

CVSS score	7.3 (High)
EPSS exploit chance	n/a
CISA exploited list	No
Weakness	CWE-89, CWE-74
Published	2026-11-03
Last modified	2026-11-03

Publisher (CNA): VulDB · Vendor: mathurvishal · Source: CVE Program record (NVD analysis pending)

Last updated 2026-11-03 · Sources: CVE Program, NVD, CISA KEV, EPSS and vendor advisories · How we score

Am I affected?

Timeline

2026-11-03 20:15 UTCPublished CVE record published
2026-11-03 20:15 UTCUpdated Record last modified

mathurvishal cloudclassroom-php-project DOWNGRADE

Affected: 5dadec098bfbbf3300d60c3494db3fb95b66e7be · c46ce5736007d9d6e51a8feeb9250729fe85f139 · dae0c5961a35a4faf28cde9e02117538f09f81c1

Fixed in: no fixed release known

Safe to downgrade to: a release before 5dadec098bfbbf3300d60c3494db3fb95b66e7be

1. Check installed version

apt-cache policy cloudclassroom-php-project || rpm -q cloudclassroom-php-project || cloudclassroom-php-project --version

2. No fixed release: DOWNGRADE to a release before 5dadec098bfbbf3300d60c3494db3fb95b66e7be (Debian / Ubuntu)

apt-cache madison cloudclassroom-php-project sudo apt install cloudclassroom-php-project=<VERSION_BEFORE_5dadec098bfbbf3300d60c3494db3fb95b66e7be> sudo apt-mark hold cloudclassroom-php-project

2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)

dnf --showduplicates list cloudclassroom-php-project sudo dnf downgrade cloudclassroom-php-project-<VERSION_BEFORE_5dadec098bfbbf3300d60c3494db3fb95b66e7be> sudo dnf versionlock add cloudclassroom-php-project

Downgrade risk

Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host.

After downgrade

Restart the service, and keep the package held until a fixed release ships.

Verify at the official source NVD · CVE Program · Report a problem with this page
Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.

Quick answers

How do I fix CVE-2026-121502?

cloudclassroom-php-project: downgrade or apply the listed mitigation. Exact commands for each OS are on this page.

Is CVE-2026-121502 being exploited?

CVE-2026-121502 is not on the CISA Known Exploited Vulnerabilities list at the time of the last update. Check again, as this can change.

What does CVE-2026-121502 affect?

CVE-2026-121502 affects cloudclassroom-php-project. Severity is high (CVSS 7.3). A vulnerability was identified in mathurvishal CloudClassroom-PHP-Project. The impacted element is an unknown function of the file facultydetails.php. The manipulation of the argument deleteid leads to sql injection. The attack may be initi

How urgent is CVE-2026-121502?

Priority 26/100. High severity

Software pages

PHP vulnerabilities

Related CVEs

CVE-2026-2058 HIGH 7.3 DOWNGRADE A flaw has been found in mathurvishal CloudClassroom-PHP-Project up to 5dadec098bfbbf3300d60c3494db3fb95b66e7b

References

← Back to latest CVEs