Executive Summary

Informations
Name CVE-2025-26198 First vendor Publication 2025-06-18
Vendor Cve Last vendor Modification 2025-07-09

Security-Database Scoring CVSS v3

Cvss vector : N/A
Overall CVSS Score NA
Base Score NA Environmental Score NA
impact SubScore NA Temporal Score NA
Exploitabality Sub Score NA
 
Calculate full CVSS 3.0 Vectors scores

Security-Database Scoring CVSS v2

Cvss vector :
Cvss Base Score N/A Attack Range N/A
Cvss Impact Score N/A Attack Complexity N/A
Cvss Expoit Score N/A Authentication N/A
Calculate full CVSS 2.0 Vectors scores

Detail

CloudClassroom-PHP-Project v1.0 contains a critical SQL Injection vulnerability in the loginlinkadmin.php component. The application fails to sanitize user-supplied input in the admin login form before directly including it in SQL queries. This allows unauthenticated attackers to inject arbitrary SQL payloads and bypass authentication, gaining unauthorized administrative access. The vulnerability is triggered when an attacker supplies specially crafted input in the username field, such as ' OR '1'='1, leading to complete compromise of the login mechanism and potential exposure of sensitive backend data.

Original Source

Url : http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-26198

CPE : Common Platform Enumeration

TypeDescriptionCount
Application 1

Sources (Detail)

https://gist.github.com/tansique-17/0776791b8edd4931216be452a6971f5e
https://github.com/tansique-17/CVE-2025-26198/
Source Url

Alert History

If you want to see full details history, please login or register.
0
1
2
Date Informations
2025-07-10 00:20:44
  • Multiple Updates
2025-06-20 21:20:39
  • Multiple Updates
2025-06-19 00:20:32
  • First insertion