Vishalmathur develops web-based educational management applications including CloudClassroom and institutional student-information systems, which serve as centralized repositories for student and institutional data. Vulnerabilities affecting this vendor skew strongly toward critical-severity outcomes and concentrate on application-layer input-handling and data-transmission weaknesses, particularly SQL injection, cross-site scripting, cleartext data exposure, and improper input validation; these flaws are characteristic of web applications handling sensitive educational records without sufficient input sanitization and encryption. Current exploitation activity and vulnerability counts are shown alongside this summary.
The number and severity of CVEs published that impact products developed by Vishalmathur over time
Signals from CVEs in this vendor scope (14 CVEs).
14 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2025-55444CRITICAL A SQL injection vulnerability exists in the id2 parameter of the cancel_booking.php page in Online Artwork and Fine Arts MCA Project 1.0. A remote attacker can inject arbitrary SQL | Aug 20, 2025 | 9.8 | 34 | NO | NO |
CVE-2025-45542HIGH SQL injection vulnerability in the registrationform endpoint of CloudClassroom-PHP-Project v1.0. The pass parameter is vulnerable due to improper input validation, allowing attacke | Jun 2, 2025 | 7.3 | 31 | NO | YES |
CVE-2026-2058CRITICAL A flaw has been found in mathurvishal CloudClassroom-PHP-Project up to 5dadec098bfbbf3300d60c3494db3fb95b66e7be. This impacts an unknown function of the file /postquerypublic.php o | Feb 6, 2026 | 9.8 | 30 | NO | NO |
CVE-2025-52410CRITICAL Institute-of-Current-Students v1.0 contains a time-based blind SQL injection vulnerability in the mydetailsstudent.php endpoint. The `myds` GET parameter is not adequately sanitize | Nov 20, 2025 | 9.8 | 30 | NO | NO |
CVE-2025-26199CRITICAL CloudClassroom-PHP-Project v1.0 is affected by an insecure credential transmission vulnerability. The application transmits passwords over unencrypted HTTP during the login process | Jun 18, 2025 | 9.8 | 30 | NO | NO |
CVE-2025-46179CRITICAL A SQL Injection vulnerability was discovered in the askquery.php file of CloudClassroom-PHP Project v1.0. The squeryx parameter accepts unsanitized input, which is passed directly | Jun 20, 2025 | 9.8 | 29 | NO | NO |
CVE-2025-26198CRITICAL CloudClassroom-PHP-Project v1.0 contains a critical SQL Injection vulnerability in the loginlinkadmin.php component. The application fails to sanitize user-supplied input in the ad | Jun 18, 2025 | 9.8 | 28 | NO | NO |
CVE-2025-44608MEDIUM CloudClassroom-PHP Project v1.0 was discovered to contain a SQL injection vulnerability via the viewid parameter. | Jul 25, 2025 | 6.5 | 24 | NO | NO |
CVE-2025-50866MEDIUM CloudClassroom-PHP-Project 1.0 contains a reflected Cross-site Scripting (XSS) vulnerability in the email parameter of the postquerypublic endpoint. Improper sanitization allows an | Jul 31, 2025 | 6.1 | 22 | NO | NO |
CVE-2025-50867MEDIUM A SQL Injection vulnerability exists in the takeassessment2.php endpoint of the CloudClassroom-PHP-Project 1.0, where the Q5 POST parameter is directly embedded in SQL statements w | Jul 31, 2025 | 6.5 | 22 | NO | NO |
Signals from CVEs in this vendor scope (14 CVEs).
An overview of all social media posts that mention a CVE ID that affects a product developed by Vishalmathur.
Media articles that mention a CVE ID that affects a product developed by Vishalmathur — matched by CVE ID, not by vendor name.