Записи vishalmathur
14 опубликованных записей вендора vishalmathur.
Профиль для исследователя
- Попали в KEV
- 0 · 0 %
- С эксплойтом
- 0 · 0 %
- Pre-auth RCE
- 4
- С записью об исправлении
- 0 %
- Медиана: публикация → KEV
- Ни одна запись не попала в KEV
Повторяющиеся классы
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')7
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')4
- CWE-20 Improper Input Validation1
- CWE-319 Cleartext Transmission of Sensitive Information1
- CWE-74 Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')1
Классы уязвимостей, которые чаще всего встречаются у этого вендора: куда смотреть.
CWEВсе записи
14 записей| Срочность | CVE | Уязвимость | Критичность | KEV | EPSS | Опубликовано |
|---|---|---|---|---|---|---|
39Наблюдать | CVE-2025-55444Эксплойта нет | A SQL injection vulnerability exists in the id2 parameter of the cancel_booking.php page in Online Artwork and Fine Arts MCA Project 1.0.vishalmathur · online artwork and fine arts project · CWE-20 | Критическая9,8 | — | 0,8 % | 20 авг. 2025 г. |
39Наблюдать | CVE-2025-26198Proof of concept | CloudClassroom-PHP-Project v1.0 contains a critical SQL Injection vulnerability in the loginlinkadmin.php component.vishalmathur · cloudclassroom-php project · CWE-89 | Критическая9,8 | — | 0,6 % | 18 июн. 2025 г. |
39Наблюдать | CVE-2025-46179Эксплойта нет | A SQL Injection vulnerability was discovered in the askquery.php file of CloudClassroom-PHP Project v1.0.vishalmathur · cloudclassroom-php project · CWE-89 | Критическая9,8 | — | 0,5 % | 20 июн. 2025 г. |
39Наблюдать | CVE-2025-26199Proof of concept | CloudClassroom-PHP-Project v1.0 is affected by an insecure credential transmission vulnerability.vishalmathur · cloudclassroom-php project · CWE-319 | Критическая9,8 | — | 0,5 % | 18 июн. 2025 г. |
39Наблюдать | CVE-2025-52410Эксплойта нет | Institute-of-Current-Students v1.0 contains a time-based blind SQL injection vulnerability in the mydetailsstudent.php endpoint.vishalmathur · institute-of-current-students · CWE-89 | Критическая9,8 | — | 0,3 % | 20 нояб. 2025 г. |
29Наблюдать | CVE-2025-45542Proof of concept | SQL injection vulnerability in the registrationform endpoint of CloudClassroom-PHP-Project v1.0.vishalmathur · cloudclassroom-php project · CWE-89 | Высокая7,3 | — | 1,1 % | 2 июн. 2025 г. |
29Наблюдать | CVE-2024-57459Эксплойта нет | A time-based SQL injection vulnerability exists in mydetailsstudent.php in the CloudClassroom PHP Project 1.0.vishalmathur · cloudclassroom-php project · CWE-89 | Высокая7,3 | — | 0,2 % | 2 июн. 2025 г. |
26Наблюдать | CVE-2025-44608Proof of concept | CloudClassroom-PHP Project v1.0 was discovered to contain a SQL injection vulnerability via the viewid parameter.vishalmathur · cloudclassroom-php project · CWE-89 | Средняя6,5 | — | 0,3 % | 25 июл. 2025 г. |
26Наблюдать | CVE-2025-50867Proof of concept | A SQL Injection vulnerability exists in the takeassessment2.php endpoint of the CloudClassroom-PHP-Project 1.0, where the Q5 POST parameter vishalmathur · cloudclassroom · CWE-89 | Средняя6,5 | — | 0,2 % | 31 июл. 2025 г. |
24Наблюдать | CVE-2024-57423Эксплойта нет | A Cross Site Scripting vulnerability in CloudClassroom-PHP Project v1.0 allows a remote attacker to execute arbitrary code via the exid paravishalmathur · cloudclassroom-php project · CWE-79 | Средняя6,1 | — | 0,4 % | 26 февр. 2025 г. |
24Наблюдать | CVE-2025-46178Proof of concept | Cross-Site Scripting (XSS) vulnerability exists in askquery.php via the eid parameter in the CloudClassroom PHP Project.vishalmathur · cloudclassroom-php project · CWE-79 | Средняя6,1 | — | 0,4 % | 9 июн. 2025 г. |
24Наблюдать | CVE-2025-51411Proof of concept | A reflected cross-site scripting (XSS) vulnerability exists in Institute-of-Current-Students v1.0 via the email parameter in the /postquerypvishalmathur · institute-of-current-students · CWE-79 | Средняя6,1 | — | 0,3 % | 25 июл. 2025 г. |
24Наблюдать | CVE-2025-50866Proof of concept | CloudClassroom-PHP-Project 1.0 contains a reflected Cross-site Scripting (XSS) vulnerability in the email parameter of the postquerypublic evishalmathur · cloudclassroom · CWE-79 | Средняя6,1 | — | 0,3 % | 31 июл. 2025 г. |
22Наблюдать | CVE-2026-2058Proof of concept | mathurvishal CloudClassroom-PHP-Project Post Query Details postquerypublic.php sql injectionvishalmathur · cloudclassroom-php-project · CWE-74 | Средняя5,5 | — | 0,5 % | 6 февр. 2026 г. |
- CVE-2025-5544439Наблюдать
A SQL injection vulnerability exists in the id2 parameter of the cancel_booking.php page in Online Artwork and Fine Arts MCA Project 1.0.
КритическаяCVSS 9,8Эксплойта нетEPSS 0 %vishalmathur · online artwork and fine arts project20 авг. 2025 г.
- CVE-2025-2619839Наблюдать
CloudClassroom-PHP-Project v1.0 contains a critical SQL Injection vulnerability in the loginlinkadmin.php component.
КритическаяCVSS 9,8Proof of conceptEPSS 0 %vishalmathur · cloudclassroom-php project18 июн. 2025 г.
- CVE-2025-4617939Наблюдать
A SQL Injection vulnerability was discovered in the askquery.php file of CloudClassroom-PHP Project v1.0.
КритическаяCVSS 9,8Эксплойта нетEPSS 0 %vishalmathur · cloudclassroom-php project20 июн. 2025 г.
- CVE-2025-2619939Наблюдать
CloudClassroom-PHP-Project v1.0 is affected by an insecure credential transmission vulnerability.
КритическаяCVSS 9,8Proof of conceptEPSS 0 %vishalmathur · cloudclassroom-php project18 июн. 2025 г.
- CVE-2025-5241039Наблюдать
Institute-of-Current-Students v1.0 contains a time-based blind SQL injection vulnerability in the mydetailsstudent.php endpoint.
КритическаяCVSS 9,8Эксплойта нетEPSS 0 %vishalmathur · institute-of-current-students20 нояб. 2025 г.
- CVE-2025-4554229Наблюдать
SQL injection vulnerability in the registrationform endpoint of CloudClassroom-PHP-Project v1.0.
ВысокаяCVSS 7,3Proof of conceptEPSS 1 %vishalmathur · cloudclassroom-php project2 июн. 2025 г.
- CVE-2024-5745929Наблюдать
A time-based SQL injection vulnerability exists in mydetailsstudent.php in the CloudClassroom PHP Project 1.0.
ВысокаяCVSS 7,3Эксплойта нетEPSS 0 %vishalmathur · cloudclassroom-php project2 июн. 2025 г.
- CVE-2025-4460826Наблюдать
CloudClassroom-PHP Project v1.0 was discovered to contain a SQL injection vulnerability via the viewid parameter.
СредняяCVSS 6,5Proof of conceptEPSS 0 %vishalmathur · cloudclassroom-php project25 июл. 2025 г.
- CVE-2025-5086726Наблюдать
A SQL Injection vulnerability exists in the takeassessment2.php endpoint of the CloudClassroom-PHP-Project 1.0, where the Q5 POST parameter
СредняяCVSS 6,5Proof of conceptEPSS 0 %vishalmathur · cloudclassroom31 июл. 2025 г.
- CVE-2024-5742324Наблюдать
A Cross Site Scripting vulnerability in CloudClassroom-PHP Project v1.0 allows a remote attacker to execute arbitrary code via the exid para
СредняяCVSS 6,1Эксплойта нетEPSS 0 %vishalmathur · cloudclassroom-php project26 февр. 2025 г.
- CVE-2025-4617824Наблюдать
Cross-Site Scripting (XSS) vulnerability exists in askquery.php via the eid parameter in the CloudClassroom PHP Project.
СредняяCVSS 6,1Proof of conceptEPSS 0 %vishalmathur · cloudclassroom-php project9 июн. 2025 г.
- CVE-2025-5141124Наблюдать
A reflected cross-site scripting (XSS) vulnerability exists in Institute-of-Current-Students v1.0 via the email parameter in the /postqueryp
СредняяCVSS 6,1Proof of conceptEPSS 0 %vishalmathur · institute-of-current-students25 июл. 2025 г.
- CVE-2025-5086624Наблюдать
CloudClassroom-PHP-Project 1.0 contains a reflected Cross-site Scripting (XSS) vulnerability in the email parameter of the postquerypublic e
СредняяCVSS 6,1Proof of conceptEPSS 0 %vishalmathur · cloudclassroom31 июл. 2025 г.
- CVE-2026-205822Наблюдать
mathurvishal CloudClassroom-PHP-Project Post Query Details postquerypublic.php sql injection
СредняяCVSS 5,5Proof of conceptEPSS 0 %vishalmathur · cloudclassroom-php-project6 февр. 2026 г.