CVE-2026-100894

Published 28 September 2026 · tracked since 28 September 2026

Description

A vulnerability was identified in mathurvishal CloudClassroom-PHP-Project up to 5dadec098bfbbf3300d60c3494db3fb95b66e7be. This issue affects some unknown processing of the file updateguest.php. The manipulation of the argument gname leads to sql injection. The attack may be initiated remotely. The e

References

• NVD — National Vulnerability Database
• CVE.org record (MITRE)
• CISA Known Exploited Vulnerabilities catalog

Latest tracked vulnerabilities

• CVE-2026-100895 MEDIUM 5.3
• CVE-2026-100898 MEDIUM 6.3
• CVE-2026-100890 MEDIUM 5.3
• CVE-2026-100891 HIGH 7.3
• CVE-2026-100887 MEDIUM 6.3
• CVE-2026-100888 HIGH 7.3
• CVE-2026-100889 HIGH 7.3
• CVE-2026-100883 MEDIUM 6.3
• CVE-2026-100884 MEDIUM 4.3
• CVE-2026-100885 HIGH 7.3

→ Open the live CVE board · all tools