HIGHCVSS v3.1 7.3Vulnerability

CVE-2026-121502

A vulnerability was identified in mathurvishal CloudClassroom-PHP-Project. The impacted element is an unknown function of the file facultydetails.php. The manipulation of the argument deleteid leads to sql injection. The attack may be initiated remotely. The exploit is publicly available and might be used. This product uses a rolling release model to deliver continuous updates. As a result, specific version information for affected or updated releases is not available. The vendor was contacted early about this disclosure but did not respond in any way.

Properties

Severity
HIGH
Nvd fetched at
2026-11-03T21:24:30.963596+00:00
Cvss severity
HIGH
Cvss score
7.3
Retrieved at
2026-11-03T21:25:36+00:00
Score
7.3
Cvss version
3.1
Last source
NVD
Cve id
CVE-2026-121502
Cvss vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
First seen by Signal
2026-11-03T21:21:12+00:00
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
Published at
2026-11-03T21:17:36.730
Last modified
2026-11-03T21:17:36.970

Related Entities (2)

Explore deeper with Ninja Signal's threat intelligence graph

CVE-2026-121502 (CVSS v3.1 7.3) — Ninja Signal Threat Intelligence | Ninja Signal