CVE-2025-26198
BaseFortify
Publication date: 2025-06-18
Last updated on: 2025-07-09
Assigner: MITRE
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| vishalmathur | cloudclassroom-php_project | 1.0 |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-89 | The product constructs all or part of an SQL command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended SQL command when it is sent to a downstream component. Without sufficient removal or quoting of SQL syntax in user-controllable inputs, the generated SQL query can cause those inputs to be interpreted as SQL instead of ordinary user data. |
Attack-Flow Graph
AI Powered Q&A
How can this vulnerability impact me? :
This vulnerability allows an unauthenticated attacker to bypass the admin login and gain unauthorized administrative access to the application. This can lead to unauthorized control over the admin dashboard, potential exposure or manipulation of sensitive data, and further exploitation through SQL injection techniques such as UNION-based queries. [1]
Can you explain this vulnerability to me?
CVE-2025-26198 is an SQL Injection vulnerability in the CloudClassroom-PHP-Project version 1.0, specifically in the loginlinkadmin.php file. The application does not properly sanitize user inputs in the admin login form, allowing attackers to inject malicious SQL code. This enables attackers to bypass authentication and gain unauthorized administrative access by manipulating the SQL query to always evaluate as true. [1]
How can this vulnerability be detected on my network or system? Can you suggest some commands?
This vulnerability can be detected by testing the admin login form at the endpoint loginlinkadmin.php for SQL Injection. A common detection method is to inject the payload `' OR '1'='1` into the username field and submit the form with any or blank password. If the application grants admin access without valid credentials, the vulnerability is present. There are no specific network commands provided, but manual testing via the web interface using this payload is effective. [1]
What immediate steps should I take to mitigate this vulnerability?
Immediate mitigation steps include sanitizing and validating all user inputs in the loginlinkadmin.php file to prevent SQL Injection. Implement prepared statements or parameterized queries to safely handle user inputs. Additionally, restrict access to the admin login page and monitor for suspicious login attempts. Applying patches or updates from the project repository, if available, is also recommended. [1]