https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2026-2058.htmlhttps://patchthecve.com/cve/CVE-2026-2058.htmlWed, 17 Jun 2026 10:30:12 +0000HIGH 7.3: A flaw has been found in mathurvishal CloudClassroom-PHP-Project up to 5dadec098bfbbf3300d60c3494db3fb95b66e7be. This impacts an unknown function of the file /postquerypublic.php of the component Post Query Details Page. This manipulation of the argument gnamex causes sql injection. The attack is pohttps://patchthecve.com/cve/CVE-2025-52410.htmlhttps://patchthecve.com/cve/CVE-2025-52410.htmlWed, 17 Jun 2026 09:36:28 +0000CRITICAL 9.8: Institute-of-Current-Students v1.0 contains a time-based blind SQL injection vulnerability in the mydetailsstudent.php endpoint. The `myds` GET parameter is not adequately sanitized before being used in SQL queries.https://patchthecve.com/cve/CVE-2025-55444.htmlhttps://patchthecve.com/cve/CVE-2025-55444.htmlWed, 17 Jun 2026 09:41:44 +0000CRITICAL 9.8: A SQL injection vulnerability exists in the id2 parameter of the cancel_booking.php page in Online Artwork and Fine Arts MCA Project 1.0. A remote attacker can inject arbitrary SQL queries, leading to database enumeration and potential remote code execution.https://patchthecve.com/cve/CVE-2025-50866.htmlhttps://patchthecve.com/cve/CVE-2025-50866.htmlWed, 17 Jun 2026 09:35:24 +0000MEDIUM 6.1: CloudClassroom-PHP-Project 1.0 contains a reflected Cross-site Scripting (XSS) vulnerability in the email parameter of the postquerypublic endpoint. Improper sanitization allows an attacker to inject arbitrary JavaScript code that executes in the context of the user s browser, potentially leading tohttps://patchthecve.com/cve/CVE-2025-50867.htmlhttps://patchthecve.com/cve/CVE-2025-50867.htmlWed, 17 Jun 2026 09:35:24 +0000MEDIUM 6.5: A SQL Injection vulnerability exists in the takeassessment2.php endpoint of the CloudClassroom-PHP-Project 1.0, where the Q5 POST parameter is directly embedded in SQL statements without sanitization.https://patchthecve.com/cve/CVE-2025-44608.htmlhttps://patchthecve.com/cve/CVE-2025-44608.htmlSun, 05 Jul 2026 01:21:41 +0000MEDIUM 6.5: CloudClassroom-PHP Project v1.0 was discovered to contain a SQL injection vulnerability via the viewid parameter.https://patchthecve.com/cve/CVE-2025-51411.htmlhttps://patchthecve.com/cve/CVE-2025-51411.htmlWed, 17 Jun 2026 09:35:35 +0000MEDIUM 6.1: A reflected cross-site scripting (XSS) vulnerability exists in Institute-of-Current-Students v1.0 via the email parameter in the /postquerypublic endpoint. The application fails to properly sanitize user input before reflecting it in the HTML response. This allows unauthenticated attackers to injecthttps://patchthecve.com/cve/CVE-2025-46179.htmlhttps://patchthecve.com/cve/CVE-2025-46179.htmlWed, 17 Jun 2026 09:26:00 +0000CRITICAL 9.8: A SQL Injection vulnerability was discovered in the askquery.php file of CloudClassroom-PHP Project v1.0. The squeryx parameter accepts unsanitized input, which is passed directly into backend SQL queries.https://patchthecve.com/cve/CVE-2025-26199.htmlhttps://patchthecve.com/cve/CVE-2025-26199.htmlWed, 17 Jun 2026 09:01:30 +0000CRITICAL 9.8: CloudClassroom-PHP-Project v1.0 is affected by an insecure credential transmission vulnerability. The application transmits passwords over unencrypted HTTP during the login process, exposing sensitive credentials to potential interception by network-based attackers. A remote attacker with access to https://patchthecve.com/cve/CVE-2025-26198.htmlhttps://patchthecve.com/cve/CVE-2025-26198.htmlWed, 17 Jun 2026 09:01:30 +0000CRITICAL 9.8: CloudClassroom-PHP-Project v1.0 contains a critical SQL Injection vulnerability in the loginlinkadmin.php component. The application fails to sanitize user-supplied input in the admin login form before directly including it in SQL queries. This allows unauthenticated attackers to inject arbitrary SQhttps://patchthecve.com/cve/CVE-2025-46178.htmlhttps://patchthecve.com/cve/CVE-2025-46178.htmlWed, 17 Jun 2026 09:26:00 +0000MEDIUM 6.1: Cross-Site Scripting (XSS) vulnerability exists in askquery.php via the eid parameter in the CloudClassroom PHP Project. This allows remote attackers to inject arbitrary JavaScript in the context of a victim s browser session by sending a crafted URL, leading to session hijacking or defacement.https://patchthecve.com/cve/CVE-2025-45542.htmlhttps://patchthecve.com/cve/CVE-2025-45542.htmlWed, 17 Jun 2026 09:25:34 +0000HIGH 7.3: SQL injection vulnerability in the registrationform endpoint of CloudClassroom-PHP-Project v1.0. The pass parameter is vulnerable due to improper input validation, allowing attackers to inject SQL queries.https://patchthecve.com/cve/CVE-2024-57459.htmlhttps://patchthecve.com/cve/CVE-2024-57459.htmlWed, 17 Jun 2026 08:13:36 +0000HIGH 7.3: A time-based SQL injection vulnerability exists in mydetailsstudent.php in the CloudClassroom PHP Project 1.0. The myds parameter does not properly validate user input, allowing an attacker to inject arbitrary SQL commands.https://patchthecve.com/cve/CVE-2024-57423.htmlhttps://patchthecve.com/cve/CVE-2024-57423.htmlWed, 17 Jun 2026 08:13:33 +0000MEDIUM 6.1: A Cross Site Scripting vulnerability in CloudClassroom-PHP Project v1.0 allows a remote attacker to execute arbitrary code via the exid parameter of the assessment function.