vishalmathur kayıtları
vishalmathur üreticisine ait 14 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 4
- Düzeltme kaydı olan
- %0
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')7
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')4
- CWE-20 Improper Input Validation1
- CWE-319 Cleartext Transmission of Sensitive Information1
- CWE-74 Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
14 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
39İzleyin | CVE-2025-55444İstismar yok | A SQL injection vulnerability exists in the id2 parameter of the cancel_booking.php page in Online Artwork and Fine Arts MCA Project 1.0.vishalmathur · online artwork and fine arts project · CWE-20 | Kritik9,8 | — | %0,8 | 20 Ağu 2025 |
39İzleyin | CVE-2025-26198Kavram kanıtı | CloudClassroom-PHP-Project v1.0 contains a critical SQL Injection vulnerability in the loginlinkadmin.php component.vishalmathur · cloudclassroom-php project · CWE-89 | Kritik9,8 | — | %0,6 | 18 Haz 2025 |
39İzleyin | CVE-2025-46179İstismar yok | A SQL Injection vulnerability was discovered in the askquery.php file of CloudClassroom-PHP Project v1.0.vishalmathur · cloudclassroom-php project · CWE-89 | Kritik9,8 | — | %0,5 | 20 Haz 2025 |
39İzleyin | CVE-2025-26199Kavram kanıtı | CloudClassroom-PHP-Project v1.0 is affected by an insecure credential transmission vulnerability.vishalmathur · cloudclassroom-php project · CWE-319 | Kritik9,8 | — | %0,5 | 18 Haz 2025 |
39İzleyin | CVE-2025-52410İstismar yok | Institute-of-Current-Students v1.0 contains a time-based blind SQL injection vulnerability in the mydetailsstudent.php endpoint.vishalmathur · institute-of-current-students · CWE-89 | Kritik9,8 | — | %0,2 | 20 Kas 2025 |
29İzleyin | CVE-2025-45542Kavram kanıtı | SQL injection vulnerability in the registrationform endpoint of CloudClassroom-PHP-Project v1.0.vishalmathur · cloudclassroom-php project · CWE-89 | Yüksek7,3 | — | %1,0 | 2 Haz 2025 |
29İzleyin | CVE-2024-57459İstismar yok | A time-based SQL injection vulnerability exists in mydetailsstudent.php in the CloudClassroom PHP Project 1.0.vishalmathur · cloudclassroom-php project · CWE-89 | Yüksek7,3 | — | %0,2 | 2 Haz 2025 |
26İzleyin | CVE-2025-44608Kavram kanıtı | CloudClassroom-PHP Project v1.0 was discovered to contain a SQL injection vulnerability via the viewid parameter.vishalmathur · cloudclassroom-php project · CWE-89 | Orta6,5 | — | %0,3 | 25 Tem 2025 |
26İzleyin | CVE-2025-50867Kavram kanıtı | A SQL Injection vulnerability exists in the takeassessment2.php endpoint of the CloudClassroom-PHP-Project 1.0, where the Q5 POST parameter vishalmathur · cloudclassroom · CWE-89 | Orta6,5 | — | %0,2 | 31 Tem 2025 |
24İzleyin | CVE-2024-57423İstismar yok | A Cross Site Scripting vulnerability in CloudClassroom-PHP Project v1.0 allows a remote attacker to execute arbitrary code via the exid paravishalmathur · cloudclassroom-php project · CWE-79 | Orta6,1 | — | %0,4 | 26 Şub 2025 |
24İzleyin | CVE-2025-46178Kavram kanıtı | Cross-Site Scripting (XSS) vulnerability exists in askquery.php via the eid parameter in the CloudClassroom PHP Project.vishalmathur · cloudclassroom-php project · CWE-79 | Orta6,1 | — | %0,3 | 9 Haz 2025 |
24İzleyin | CVE-2025-51411Kavram kanıtı | A reflected cross-site scripting (XSS) vulnerability exists in Institute-of-Current-Students v1.0 via the email parameter in the /postquerypvishalmathur · institute-of-current-students · CWE-79 | Orta6,1 | — | %0,3 | 25 Tem 2025 |
24İzleyin | CVE-2025-50866Kavram kanıtı | CloudClassroom-PHP-Project 1.0 contains a reflected Cross-site Scripting (XSS) vulnerability in the email parameter of the postquerypublic evishalmathur · cloudclassroom · CWE-79 | Orta6,1 | — | %0,2 | 31 Tem 2025 |
22İzleyin | CVE-2026-2058Kavram kanıtı | mathurvishal CloudClassroom-PHP-Project Post Query Details postquerypublic.php sql injectionvishalmathur · cloudclassroom-php-project · CWE-74 | Orta5,5 | — | %0,5 | 6 Şub 2026 |
- CVE-2025-5544439İzleyin
A SQL injection vulnerability exists in the id2 parameter of the cancel_booking.php page in Online Artwork and Fine Arts MCA Project 1.0.
KritikCVSS 9,8İstismar yokEPSS %0vishalmathur · online artwork and fine arts project20 Ağu 2025
- CVE-2025-2619839İzleyin
CloudClassroom-PHP-Project v1.0 contains a critical SQL Injection vulnerability in the loginlinkadmin.php component.
KritikCVSS 9,8Kavram kanıtıEPSS %0vishalmathur · cloudclassroom-php project18 Haz 2025
- CVE-2025-4617939İzleyin
A SQL Injection vulnerability was discovered in the askquery.php file of CloudClassroom-PHP Project v1.0.
KritikCVSS 9,8İstismar yokEPSS %0vishalmathur · cloudclassroom-php project20 Haz 2025
- CVE-2025-2619939İzleyin
CloudClassroom-PHP-Project v1.0 is affected by an insecure credential transmission vulnerability.
KritikCVSS 9,8Kavram kanıtıEPSS %0vishalmathur · cloudclassroom-php project18 Haz 2025
- CVE-2025-5241039İzleyin
Institute-of-Current-Students v1.0 contains a time-based blind SQL injection vulnerability in the mydetailsstudent.php endpoint.
KritikCVSS 9,8İstismar yokEPSS %0vishalmathur · institute-of-current-students20 Kas 2025
- CVE-2025-4554229İzleyin
SQL injection vulnerability in the registrationform endpoint of CloudClassroom-PHP-Project v1.0.
YüksekCVSS 7,3Kavram kanıtıEPSS %1vishalmathur · cloudclassroom-php project2 Haz 2025
- CVE-2024-5745929İzleyin
A time-based SQL injection vulnerability exists in mydetailsstudent.php in the CloudClassroom PHP Project 1.0.
YüksekCVSS 7,3İstismar yokEPSS %0vishalmathur · cloudclassroom-php project2 Haz 2025
- CVE-2025-4460826İzleyin
CloudClassroom-PHP Project v1.0 was discovered to contain a SQL injection vulnerability via the viewid parameter.
OrtaCVSS 6,5Kavram kanıtıEPSS %0vishalmathur · cloudclassroom-php project25 Tem 2025
- CVE-2025-5086726İzleyin
A SQL Injection vulnerability exists in the takeassessment2.php endpoint of the CloudClassroom-PHP-Project 1.0, where the Q5 POST parameter
OrtaCVSS 6,5Kavram kanıtıEPSS %0vishalmathur · cloudclassroom31 Tem 2025
- CVE-2024-5742324İzleyin
A Cross Site Scripting vulnerability in CloudClassroom-PHP Project v1.0 allows a remote attacker to execute arbitrary code via the exid para
OrtaCVSS 6,1İstismar yokEPSS %0vishalmathur · cloudclassroom-php project26 Şub 2025
- CVE-2025-4617824İzleyin
Cross-Site Scripting (XSS) vulnerability exists in askquery.php via the eid parameter in the CloudClassroom PHP Project.
OrtaCVSS 6,1Kavram kanıtıEPSS %0vishalmathur · cloudclassroom-php project9 Haz 2025
- CVE-2025-5141124İzleyin
A reflected cross-site scripting (XSS) vulnerability exists in Institute-of-Current-Students v1.0 via the email parameter in the /postqueryp
OrtaCVSS 6,1Kavram kanıtıEPSS %0vishalmathur · institute-of-current-students25 Tem 2025
- CVE-2025-5086624İzleyin
CloudClassroom-PHP-Project 1.0 contains a reflected Cross-site Scripting (XSS) vulnerability in the email parameter of the postquerypublic e
OrtaCVSS 6,1Kavram kanıtıEPSS %0vishalmathur · cloudclassroom31 Tem 2025
- CVE-2026-205822İzleyin
mathurvishal CloudClassroom-PHP-Project Post Query Details postquerypublic.php sql injection
OrtaCVSS 5,5Kavram kanıtıEPSS %0vishalmathur · cloudclassroom-php-project6 Şub 2026