High severity · published Jun 2, 2025
CVE-2024-57459
A time-based SQL injection vulnerability exists in mydetailsstudent.php in the CloudClassroom PHP Project 1.0
7.3
CVSS
0.2%
EPSS
No
On KEV
Description
A time-based SQL injection vulnerability exists in mydetailsstudent.php in the CloudClassroom PHP Project 1.0. The myds parameter does not properly validate user input, allowing an attacker to inject arbitrary SQL commands.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
Low
Integrity
Low
Availability
Low
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.2% · higher than 15% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
CP
Cloudclassroom-php Project · Vishalmathur
1.0 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2024-57459
CVE.org
https://www.cve.org/CVERecord?id=CVE-2024-57459
Third Party Advisory
https://gist.github.com/b0mk35h/921cfa00f9ea1af66645574537d38587
Not Applicable
https://owasp.org/www-community/attacks/SQL_Injection
More from Cloudclassroom-php Project
9.8
CVE-2026-2058
mathurvishal CloudClassroom-PHP-Project Post Query Details postquerypublic.php sql injection
9.8
CVE-2025-46179
A SQL Injection vulnerability was discovered in the askquery.php file of CloudClassroom-PHP Project v1.0
9.8
CVE-2025-26198
CloudClassroom-PHP-Project v1.0 contains a critical SQL Injection vulnerability in the loginlinkadmin.php component
9.8
CVE-2025-26199
CloudClassroom-PHP-Project v1.0 is affected by an insecure credential transmission vulnerability
7.3
CVE-2025-45542
SQL injection vulnerability in the registrationform endpoint of CloudClassroom-PHP-Project v1.0