CVE-2025-44608

MediumCVSS 6.5

Published: 25/07/2025(UTC)Updated: 05/07/2026(UTC)Translated: 06/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.30%

21th percentile - higher than 21% of all known CVEs

Summary

CloudClassroom-PHP Project v1.0 contains a SQL injection vulnerability via the viewid parameter. An attacker can exploit this flaw to execute unauthorized database queries.

Risk Assessment

The risk involves potential theft, modification, or deletion of database data, leading to a breach of system confidentiality and integrity.

Recommendation

It is recommended to immediately update to the latest version of the project or apply appropriate patches. Also, implement input validation and use parameterized queries.

Original NVD description (English source)

CloudClassroom-PHP Project v1.0 was discovered to contain a SQL injection vulnerability via the viewid parameter.