CVE-2024-57459

概要

参考情報

• gist.github.com/b0mk35h/921cfa00f9ea1af66645574537d38587 · Third Party Advisory
• owasp.org/www-community/attacks/SQL_Injection · Not Applicable

cloudclassroom-php project のその他の脆弱性

• CVE-2025-44608中 6.5CloudClassroom-PHP Project v1.0 was discovered to contain a SQL injection vulnerability via the viewid parameter.
• CVE-2025-46179緊急 9.8A SQL Injection vulnerability was discovered in the askquery.php file of CloudClassroom-PHP Project v1.0. The squeryx parameter accepts unsa…
• CVE-2025-26199緊急 9.8CloudClassroom-PHP-Project v1.0 is affected by an insecure credential transmission vulnerability. The application transmits passwords over u…
• CVE-2025-26198緊急 9.8CloudClassroom-PHP-Project v1.0 contains a critical SQL Injection vulnerability in the loginlinkadmin.php component. The application fails t…
• CVE-2025-46178中 6.1Cross-Site Scripting (XSS) vulnerability exists in askquery.php via the eid parameter in the CloudClassroom PHP Project. This allows remote …