CVE-2026-120342

{
  "etk_id": "ETK-2026-3270",
  "cve_id": "CVE-2026-120342",
  "display_id": "CVE-2026-120342",
  "ghsa_id": "GHSA-j2v3-rvjg-3vwx",
  "euvd_id": "EUVD-2026-115065",
  "status": "published",
  "anchor_state": "anchored",
  "title": "SQL injection in CloudClassroom-PHP-Project",
  "summary": "CloudClassroom-PHP-Project contains an SQL injection flaw in viewquery.php when processing the eid request parameter. A remote unauthenticated attacker may be able to alter database queries if they can reach the affected application endpoint.",
  "mitigation": "Restrict public access to the affected application or viewquery.php until it is corrected, and allow access only from trusted networks where possible. Update the query handling to use parameterized statements and enforce server-side validation of eid; no fixed release is identified in the available evidence.",
  "vendor": "mathurvishal",
  "product": "CloudClassroom-PHP-Project",
  "affected": [
    {
      "affected_notes": [],
      "affected_ranges": [
        "5dadec098bfbbf3300d60c3494db3fb95b66e7be",
        "c46ce5736007d9d6e51a8feeb9250729fe85f139",
        "dae0c5961a35a4faf28cde9e02117538f09f81c1"
      ],
      "ecosystem": null,
      "fixed_versions": [],
      "package_name": "CloudClassroom-PHP-Project",
      "purl": null
    }
  ],
  "cwes": null,
  "cvss_score": 7.3,
  "cvss_src": "cna_vendor",
  "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
  "epss_score": null,
  "epss_percentile": null,
  "epss_asof": null,
  "automation": "deterministic",
  "check": false,
  "check_confidence_basis": null,
  "exploit": false,
  "pipeline_minutes": 19.3317197,
  "t0_at": "2026-11-02T04:30:15.935000+00:00",
  "signals": {
    "trigger_signal": {
      "at": "2026-11-02T04:30:15.935000+00:00",
      "days": 0,
      "is_lower_bound": false,
      "measured_at": "2026-11-02T04:30:15.935000+00:00",
      "url": "https://github.com/advisories/GHSA-j2v3-rvjg-3vwx"
    }
  }
}