CVE-2026-97884
Last modified
CVE-2026-97884 is a medium-severity vulnerability rated 6.3/10 on the CVSS scale. A vulnerability was detected in mathurvishal CloudClassroom-PHP-Project up to 5dadec098bfbbf3300d60c3494db3fb95b66e7be. This impacts an unknown function of the file updatestudent.php of the component Student Update Functionality.
Description
A vulnerability was detected in mathurvishal CloudClassroom-PHP-Project up to 5dadec098bfbbf3300d60c3494db3fb95b66e7be. This impacts an unknown function of the file updatestudent.php of the component Student Update Functionality. The manipulation of the argument eno results in sql injection. The attack can be launched remotely. The exploit is now public and may be used. This product does not use versioning. This is why information about affected and unaffected releases are unavailable. The vendor was contacted early about this disclosure but did not respond in any way.
Metrics
Weakness Enumeration
Affected Software
Source: CNA advisory (CVE.org). NVD analysis pending.
| Vendor | Product | Versions |
|---|---|---|
| mathurvishal | CloudClassroom-PHP-Project | 5dadec098bfbbf3300d60c3494db3fb95b66e7be |
References
Timeline
- Published
- Last Modified
- Status
- Received
Frequently Asked Questions
What is CVE-2026-97884?
How severe is CVE-2026-97884?
How do I fix CVE-2026-97884?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2026
- CVE-2026-97875Rojo's "rojo serve" HTTP API (default port 34872) has no Hos…8.1
- CVE-2026-97877A vulnerability was determined in zhistaredu StarTraining up…7.3
- CVE-2026-97878A vulnerability was identified in zhistaredu StarTraining up…7.3
- CVE-2026-97879A security flaw has been discovered in zhistaredu StarTraini…5.3
- CVE-2026-97882A weakness has been identified in mathurvishal CloudClassroo…7.3
- CVE-2026-97883A security vulnerability has been detected in mathurvishal C…7.3
- CVE-2026-97885A flaw has been found in mathurvishal CloudClassroom-PHP-Pro…7.3
- CVE-2026-97886A vulnerability has been found in mathurvishal CloudClassroo…6.3
- CVE-2026-9789A Local Privilege Escalation (LPE) vulnerability affects Ace…8.5
- CVE-2026-97895A vulnerability was determined in krayin laravel-crm up to 2…6.3
- CVE-2026-97896A vulnerability was identified in krayin laravel-crm up to 2…3.5
- CVE-2026-97897A security flaw has been discovered in Krayin laravel-crm up…3.5
Are you affected by CVE-2026-97884?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST
