vishalmathur records

14 published records for vendor vishalmathur.

Researcher profile

Entered KEV: 0 · 0%
Weaponized: 0 · 0%
Pre-auth RCE: 4
With a fix record: 0%
Median publish → KEV: No record has entered KEV

Pre-auth RCE: flaws that let an attacker run code over the network without an account. Median publish → KEV: the typical time between a record being published and CISA listing it as exploited.

Records by year

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

Attack profile

All records

14 records

CVE records
Action	CVE	Vulnerability	Severity	EPSS · Published
39Monitor	CVE-2025-55444No exploit	A SQL injection vulnerability exists in the id2 parameter of the cancel_booking.php page in Online Artwork and Fine Arts MCA Project 1.0.vishalmathur · online artwork and fine arts project · CWE-20 pre-auth RCE SQL injection	Critical9.8	0.9%Aug 20, 2025
39Monitor	CVE-2025-26198Proof of concept	CloudClassroom-PHP-Project v1.0 contains a critical SQL Injection vulnerability in the loginlinkadmin.php component.vishalmathur · cloudclassroom-php project · CWE-89 Pre-auth Auth bypass SQL injection	Critical9.8	0.6%Jun 18, 2025
39Monitor	CVE-2025-46179No exploit	A SQL Injection vulnerability was discovered in the askquery.php file of CloudClassroom-PHP Project v1.0.vishalmathur · cloudclassroom-php project · CWE-89 Pre-auth SQL injection	Critical9.8	0.5%Jun 20, 2025
39Monitor	CVE-2025-26199Proof of concept	CloudClassroom-PHP-Project v1.0 is affected by an insecure credential transmission vulnerability.vishalmathur · cloudclassroom-php project · CWE-319 pre-auth RCE Weak crypto	Critical9.8	0.5%Jun 18, 2025
39Monitor	CVE-2025-52410No exploit	Institute-of-Current-Students v1.0 contains a time-based blind SQL injection vulnerability in the mydetailsstudent.php endpoint.vishalmathur · institute-of-current-students · CWE-89 Pre-auth SQL injection	Critical9.8	0.3%Nov 20, 2025
29Monitor	CVE-2025-45542Proof of concept	SQL injection vulnerability in the registrationform endpoint of CloudClassroom-PHP-Project v1.0.vishalmathur · cloudclassroom-php project · CWE-89 Pre-auth SQL injection	High7.3	1.1%Jun 2, 2025
29Monitor	CVE-2024-57459No exploit	A time-based SQL injection vulnerability exists in mydetailsstudent.php in the CloudClassroom PHP Project 1.0.vishalmathur · cloudclassroom-php project · CWE-89 Pre-auth SQL injection	High7.3	0.2%Jun 2, 2025
26Monitor	CVE-2025-44608Proof of concept	CloudClassroom-PHP Project v1.0 was discovered to contain a SQL injection vulnerability via the viewid parameter.vishalmathur · cloudclassroom-php project · CWE-89 Pre-auth SQL injection	Medium6.5	0.3%Jul 25, 2025
26Monitor	CVE-2025-50867Proof of concept	A SQL Injection vulnerability exists in the takeassessment2.php endpoint of the CloudClassroom-PHP-Project 1.0, where the Q5 POST parameter vishalmathur · cloudclassroom · CWE-89 Pre-auth SQL injection	Medium6.5	0.2%Jul 31, 2025
24Monitor	CVE-2024-57423No exploit	A Cross Site Scripting vulnerability in CloudClassroom-PHP Project v1.0 allows a remote attacker to execute arbitrary code via the exid paravishalmathur · cloudclassroom-php project · CWE-79 pre-auth RCE XSS	Medium6.1	0.4%Feb 26, 2025
24Monitor	CVE-2025-46178Proof of concept	Cross-Site Scripting (XSS) vulnerability exists in askquery.php via the eid parameter in the CloudClassroom PHP Project.vishalmathur · cloudclassroom-php project · CWE-79 Pre-auth XSS	Medium6.1	0.4%Jun 9, 2025
24Monitor	CVE-2025-51411Proof of concept	A reflected cross-site scripting (XSS) vulnerability exists in Institute-of-Current-Students v1.0 via the email parameter in the /postquerypvishalmathur · institute-of-current-students · CWE-79 pre-auth RCE XSS	Medium6.1	0.3%Jul 25, 2025
24Monitor	CVE-2025-50866Proof of concept	CloudClassroom-PHP-Project 1.0 contains a reflected Cross-site Scripting (XSS) vulnerability in the email parameter of the postquerypublic evishalmathur · cloudclassroom · CWE-79 Pre-auth XSS	Medium6.1	0.3%Jul 31, 2025
22Monitor	CVE-2026-2058Proof of concept	mathurvishal CloudClassroom-PHP-Project Post Query Details postquerypublic.php sql injectionvishalmathur · cloudclassroom-php-project · CWE-74 Pre-auth SQL injection	Medium5.5	0.5%Feb 6, 2026

CVE-2025-55444
39Monitor
A SQL injection vulnerability exists in the id2 parameter of the cancel_booking.php page in Online Artwork and Fine Arts MCA Project 1.0.
CriticalCVSS 9.8No exploitEPSS 0%
- pre-auth RCE
- SQL injection
vishalmathur · online artwork and fine arts projectAug 20, 2025
CVE-2025-26198
39Monitor
CloudClassroom-PHP-Project v1.0 contains a critical SQL Injection vulnerability in the loginlinkadmin.php component.
CriticalCVSS 9.8Proof of conceptEPSS 0%
vishalmathur · cloudclassroom-php projectJun 18, 2025
CVE-2025-46179
39Monitor
A SQL Injection vulnerability was discovered in the askquery.php file of CloudClassroom-PHP Project v1.0.
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
- SQL injection
vishalmathur · cloudclassroom-php projectJun 20, 2025
CVE-2025-26199
39Monitor
CloudClassroom-PHP-Project v1.0 is affected by an insecure credential transmission vulnerability.
CriticalCVSS 9.8Proof of conceptEPSS 0%
- pre-auth RCE
- Weak crypto
vishalmathur · cloudclassroom-php projectJun 18, 2025
CVE-2025-52410
39Monitor
Institute-of-Current-Students v1.0 contains a time-based blind SQL injection vulnerability in the mydetailsstudent.php endpoint.
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
- SQL injection
vishalmathur · institute-of-current-studentsNov 20, 2025
CVE-2025-45542
29Monitor
SQL injection vulnerability in the registrationform endpoint of CloudClassroom-PHP-Project v1.0.
HighCVSS 7.3Proof of conceptEPSS 1%
- Pre-auth
- SQL injection
vishalmathur · cloudclassroom-php projectJun 2, 2025
CVE-2024-57459
29Monitor
A time-based SQL injection vulnerability exists in mydetailsstudent.php in the CloudClassroom PHP Project 1.0.
HighCVSS 7.3No exploitEPSS 0%
- Pre-auth
- SQL injection
vishalmathur · cloudclassroom-php projectJun 2, 2025
CVE-2025-44608
26Monitor
CloudClassroom-PHP Project v1.0 was discovered to contain a SQL injection vulnerability via the viewid parameter.
MediumCVSS 6.5Proof of conceptEPSS 0%
- Pre-auth
- SQL injection
vishalmathur · cloudclassroom-php projectJul 25, 2025
CVE-2025-50867
26Monitor
A SQL Injection vulnerability exists in the takeassessment2.php endpoint of the CloudClassroom-PHP-Project 1.0, where the Q5 POST parameter
MediumCVSS 6.5Proof of conceptEPSS 0%
- Pre-auth
- SQL injection
vishalmathur · cloudclassroomJul 31, 2025
CVE-2024-57423
24Monitor
A Cross Site Scripting vulnerability in CloudClassroom-PHP Project v1.0 allows a remote attacker to execute arbitrary code via the exid para
MediumCVSS 6.1No exploitEPSS 0%
- pre-auth RCE
- XSS
vishalmathur · cloudclassroom-php projectFeb 26, 2025
CVE-2025-46178
24Monitor
Cross-Site Scripting (XSS) vulnerability exists in askquery.php via the eid parameter in the CloudClassroom PHP Project.
MediumCVSS 6.1Proof of conceptEPSS 0%
- Pre-auth
- XSS
vishalmathur · cloudclassroom-php projectJun 9, 2025
CVE-2025-51411
24Monitor
A reflected cross-site scripting (XSS) vulnerability exists in Institute-of-Current-Students v1.0 via the email parameter in the /postqueryp
MediumCVSS 6.1Proof of conceptEPSS 0%
- pre-auth RCE
- XSS
vishalmathur · institute-of-current-studentsJul 25, 2025
CVE-2025-50866
24Monitor
CloudClassroom-PHP-Project 1.0 contains a reflected Cross-site Scripting (XSS) vulnerability in the email parameter of the postquerypublic e
MediumCVSS 6.1Proof of conceptEPSS 0%
- Pre-auth
- XSS
vishalmathur · cloudclassroomJul 31, 2025
CVE-2026-2058
22Monitor
mathurvishal CloudClassroom-PHP-Project Post Query Details postquerypublic.php sql injection
MediumCVSS 5.5Proof of conceptEPSS 0%
- Pre-auth
- SQL injection
vishalmathur · cloudclassroom-php-projectFeb 6, 2026