CVE-2026-100894 | mathurvishal CloudClassroom-PHP-Project up to 5dadec098bfbbf3300d60c3494db3fb95b66e7be updateguest.php gname sql injection

September 27, 2026 Yanac

A vulnerability classified as critical has been found in mathurvishal CloudClassroom-PHP-Project up to 5dadec098bfbbf3300d60c3494db3fb95b66e7be. This issue affects some unknown processing of the file updateguest.php. The manipulation of the argument gname leads to sql injection.

This vulnerability is listed as CVE-2026-100894. The attack may be initiated remotely. In addition, an exploit is available.

This product uses a rolling release model to deliver continuous updates. As a result, specific version information for affected or updated releases is not available.

The vendor was contacted early about this disclosure but did not respond in any way.VulDB Recent EntriesRead More