CVE-2026-120341
Received Received - Intake

Open Redirect in CloudClassroom-PHP-Project

Publication date: 2026-11-02

Last updated on: 2026-11-02

Assigner: VulDB

Description
A security vulnerability has been detected in mathurvishal CloudClassroom-PHP-Project. Impacted is an unknown function of the file studentdetails.php. The manipulation leads to execution after redirect. Remote exploitation of the attack is possible. The exploit has been disclosed publicly and may be used. This product follows a rolling release approach for continuous delivery, so version details for affected or updated releases are not provided. The vendor was contacted early about this disclosure but did not respond in any way.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-11-02
Last Modified
2026-11-02
Generated
2026-11-02
AI Q&A
2026-11-02
EPSS Evaluated
N/A
NVD
CVE-2026-120341

Affected Vendors & Products

Showing 3 associated CPEs
Vendor Product Version / Range
mathurvishal CloudClassroom-PHP-Project 5dadec098bfbbf3300d60c3494db3fb95b66e7be
mathurvishal CloudClassroom-PHP-Project c46ce5736007d9d6e51a8feeb9250729fe85f139
mathurvishal CloudClassroom-PHP-Project dae0c5961a35a4faf28cde9e02117538f09f81c1

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-698 The web application sends a redirect to another location, but instead of exiting, it executes additional code.
CWE-705 The product does not properly return control flow to the proper location after it has completed a task or detected an unusual condition.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability exists in mathurvishal CloudClassroom-PHP-Project, specifically in the studentdetails.php file. It allows attackers to execute arbitrary code after a redirect, meaning they can perform actions on the system without proper authorization. The issue stems from improper handling of user input or flow control in the application.

Impact Analysis

An attacker could exploit this to run malicious code on the server, potentially stealing sensitive data, modifying system behavior, or disrupting services. Since the exploit is publicly available, the risk of attack is higher. The impact depends on the application's role and data it handles.

Compliance Impact

The vulnerability allows remote execution after redirect due to an unknown function in studentdetails.php. This could lead to unauthorized data access or modification, potentially violating GDPR (data protection) and HIPAA (health data privacy) by exposing sensitive information.

Mitigation Strategies

Immediately remove or disable the CloudClassroom-PHP-Project application from your network or system. Since the vendor did not respond and no patches are available, isolating the affected component is critical to prevent exploitation.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-120341. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart

Security Radar

News mentioning this vulnerability
Loading related security news...