Live › vulnerability › CVE-2026-120341
VulDB classifies this as CWE-698 (execution after redirect): studentdetails.php sends a redirect but does not stop executing, so the rest of the page runs. VulDB says no authentication is required and a public proof of concept exists. This is not described as remote code execution. The vendor did not respond, and the repo is rolling-release with no fixed version.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-11-02 05:21 UTC. All times on this page are UTC.
Only deployments of the mathurvishal CloudClassroom-PHP-Project that include studentdetails.php are described as exposed. The sources do not say how the project is typically deployed or whether a configuration changes exposure. Teams that do not run this project can skip it.
| Product | Ecosystem | Affected | Fixed in |
|---|---|---|---|
| CloudClassroom-PHP-Project | generic | commits 5dadec098bfbbf3300d60c3494db3fb95b66e7be, c46ce5736007d9d6e51a8feeb9250729fe85f139, dae0c5961a35a4faf28cde9e02117538f09f81c1 (rolling release) | – |
Location: ...) without exit; or die; right after itLocation: ...) redirect, or require authentication in front of the app, or stop using the projectEach row is the first time that source carried this signal. The analyst’s rows are its own findings.
A security vulnerability has been detected in mathurvishal CloudClassroom-PHP-Project. Impacted is an unknown function of the file studentdetails.php. The manipulation leads to execution after redirect. Remote exploitation of the attack is possible. The exploit has been disclosed publicly and may be used. This product follows a rolling release approach for continuous delivery, so version details for affected or updated releases are not provided. The vendor was contacted early about this disclosure but did not respond in any way.
This page as .md · .json · in your agent: get_signal("CVE-2026-120341")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.