{"id":"CVE-2026-120341","kind":"vulnerability","aliases":["CVE-2026-120341"],"related":[],"title":"CloudClassroom-PHP-Project: studentdetails.php keeps running after a redirect, so protected content can be reached without login","description":"A security vulnerability has been detected in mathurvishal CloudClassroom-PHP-Project. Impacted is an unknown function of the file studentdetails.php. The manipulation leads to execution after redirect. Remote exploitation of the attack is possible. The exploit has been disclosed publicly and may be used. This product follows a rolling release approach for continuous delivery, so version details for affected or updated releases are not provided. The vendor was contacted early about this disclosure but did not respond in any way.","summary":"VulDB classifies this as CWE-698 (execution after redirect): studentdetails.php sends a redirect but does not stop executing, so the rest of the page runs. VulDB says no authentication is required and a public proof of concept exists. This is not described as remote code execution. The vendor did not respond, and the repo is rolling-release with no fixed version.","severity":"high","cvss":7.5,"epss":null,"exploited":false,"exploited_at":null,"products":[{"name":"CloudClassroom-PHP-Project","fixed":[],"affected":"commits 5dadec098bfbbf3300d60c3494db3fb95b66e7be, c46ce5736007d9d6e51a8feeb9250729fe85f139, dae0c5961a35a4faf28cde9e02117538f09f81c1 (rolling release)","ecosystem":"generic"}],"ecosystems":[],"tags":["cloudclassroom-php-project","cwe-698","execution-after-redirect","package","php"],"not_affected_if":["auth-required","not-deployed"],"how_to_check":"Look for studentdetails.php from mathurvishal/CloudClassroom-PHP-Project (commits 5dadec09, c46ce573, dae0c596 are listed by VulDB; no other versions are stated). In the file, look for header('Location: ...') without exit; or die; right after it. Test: request the page without a session and check whether the response body still contains the admin content despite the 302. Also check other admin pages of the project for the same pattern.","fix":"No fix: VulDB says the vendor did not respond and no countermeasure is known. Workaround: add exit; after each header('Location: ...') redirect, or require authentication in front of the app, or stop using the project.","status":"open","published_at":"2026-11-02T05:18:23+00:00","first_seen_at":"2026-11-02T05:21:35+00:00","triaged_at":"2026-11-02T05:23:31+00:00","updated_at":"2026-11-02T05:24:48+00:00","category":"package","confidence":0.6,"triage":{"at":"2026-11-02T05:23:31Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"internet","title":"CloudClassroom-PHP-Project: studentdetails.php flaw lets remote attackers execute code","impact":"high","summary":"A flaw in the studentdetails.php file of the CloudClassroom-PHP-Project student-management sample lets a remote attacker trigger code execution after a redirect. The exploit has been published publicly, and the vendor has not responded to disclosure.","audience":"developers","category":"package","nicknames":[],"who_cares":["php","cloudclassroom-php-project"],"confidence":0.55,"fix_status":"none","needs_auth":"unknown","worst_case":"Remote code execution on the server running the project","analyst_note":"Confirm the affected code path in studentdetails.php and whether authentication is required; the NVD entry is the only source and gives no version or fix.","how_to_check":"- Check whether the deployment includes `studentdetails.php` from the CloudClassroom-PHP-Project repository.\n- Confirm the project is not running in production or on an internet-facing host.\n- Version details: unknown, the project uses a rolling release.","plain_action":"","needs_analyst":true,"not_affected_if":["not-deployed"],"who_is_affected":"Only deployments of the mathurvishal CloudClassroom-PHP-Project that include studentdetails.php are described as exposed. The sources do not say how the project is typically deployed or whether a configuration changes exposure. Teams that do not run this project can skip it.","user_interaction":"unknown","needs_special_setup":"unknown","severity_if_unknown":"high"},"cost_usd":0.000692,"input_tokens":4180,"output_tokens":547,"severity_before":"high"},"analyst_status":"done","analyst_note":"Confirm the affected code path in studentdetails.php and whether authentication is required; the NVD entry is the only source and gives no version or fix.","search":"'-120341':21A,24A '-2026':20A,23A '-698':34B,46B 'affect':162C 'approach':154C 'attack':135C 'authent':69B 'classifi':42B 'cloudclassroom':2A,26A,30B,112C 'cloudclassroom-php-project':1A,25A,29B,111C 'code':85B 'concept':77B 'contact':172C 'content':13A 'continu':156C 'cve':19A,22A 'cwe':33B,45B 'deliveri':157C 'describ':82B 'detail':160C 'detect':108C 'disclos':142C 'disclosur':176C 'earli':173C 'execut':36B,47B,58B,86B,128C 'execution-after-redirect':35B 'exist':78B 'exploit':132C,139C 'file':122C 'fix':101B 'follow':150C 'function':119C 'impact':115C 'keep':6A 'lead':126C 'login':18A 'manipul':125C 'mathurvish':110C 'may':145C 'packag':39B 'page':64B 'php':3A,27A,31B,40B,113C 'possibl':137C 'product':149C 'project':4A,28A,32B,114C 'proof':75B 'protect':12A 'provid':168C 'public':74B,143C 'reach':16A 'redirect':10A,38B,49B,53B,130C 'releas':98B,153C,165C 'remot':84B,131C 'repo':94B 'requir':71B 'respond':91B,180C 'rest':61B 'roll':97B,152C 'rolling-releas':96B 'run':7A,65B 'say':67B 'secur':104C 'send':51B 'stop':57B 'studentdetails.php':5A,50B,123C 'unknown':118C 'updat':164C 'use':147C 'vendor':88B,170C 'version':102B,159C 'vuldb':41B,66B 'vulner':105C 'way':183C 'without':17A","nicknames":[],"mitigations":[],"who_affected":"Only deployments of the mathurvishal CloudClassroom-PHP-Project that include studentdetails.php are described as exposed. The sources do not say how the project is typically deployed or whether a configuration changes exposure. Teams that do not run this project can skip it.","tier":"B","verified":{},"analyst_revisit_at":null,"fix_status":"none","audience":"developers","plain_action":null,"pkeys":["cloudclassroomphpproject"],"ptokens":["cloudclassroom","php","project"],"labels":["cloudclassroomphpproject","cwe698","executionafterredirect","high","package","php"],"first_public_at":"2026-11-02T05:18:23+00:00","kev":null,"cvss_vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","cvss_by":"cna@vuldb.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-120341","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-120341","severity":null,"published_at":"2026-11-02T05:18:23+00:00","modified_at":"2026-11-02T05:18:23+00:00","first_seen_at":"2026-11-02T05:21:35+00:00","fetched_at":"2026-11-02T05:21:35+00:00","note":null},{"source":"analyst","external_id":"CVE-2026-120341:1349","url":null,"severity":null,"published_at":"2026-11-02T05:24:48+00:00","modified_at":"2026-11-02T05:24:48+00:00","first_seen_at":"2026-11-02T05:24:48+00:00","fetched_at":"2026-11-02T05:24:48+00:00","note":"Read VulDB VDB-429666 (secondary; CNA) and repo file (PHP source not rendered). Triage 'code execution' wording is wrong: CWE-698 execution after redirect, unauthenticated per VulDB, PoC public on GitHub (link not shown). Nothing verified: no maintainer page. Sample/student project, low real-world exposure."}],"documents":[{"id":50397,"url":"https://vuldb.com/vuln/429666","title":"VulDB VDB-429666: CloudClassroom-PHP-Project studentdetails.php redirect","kind":"advisory","source":"analyst","publisher":null,"text":null,"published_at":null,"relation":"advisory","confidence":null,"note":null},{"id":50398,"url":"https://github.com/mathurvishal/CloudClassroom-PHP-Project/blob/master/studentdetails.php","title":"studentdetails.php (repo, master)","kind":"other","source":"analyst","publisher":null,"text":null,"published_at":null,"relation":"describes","confidence":null,"note":null}],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}