SQL Injection in CloudClassroom PHP Student Details Handler

A security vulnerability has been detected in mathurvishal CloudClassroom-PHP-Project up to 5dadec098bfbbf3300d60c3494db3fb95b66e7be. This impacts an unknown function of the file updatedetailsfromstudent.php. The manipulation of the argument eno leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed publicly and may be used. Continious delivery with rolling releases is used by this product. Therefore, no version details of affected nor updated releases are available. The vendor was contacted early about this disclosure but did not respond in any way.

Casky was already ahead

This CVE exploits attack patterns that Casky's 323matched skills already investigate — long before this vulnerability was disclosed. Claude's reasoning model maps these techniques to MITRE ATT&CK, so practitioners who ran these skills have already seen the threat behaviour in their findings.

Analysis

CVE-2026-100314 represents a critical SQL injection vulnerability in the mathurvishal CloudClassroom-PHP-Project, specifically within the updatedetailsfromstudent.php file where the 'eno' parameter is inadequately sanitized. With a CVSS score of 7.3, this high-severity flaw enables remote attackers to execute arbitrary SQL queries without authentication, potentially leading to unauthorized data access, modification, or deletion of student records and institutional data. Educational institutions deploying this project are at immediate risk, as the vulnerability has been publicly disclosed and exploitation techniques are available in the wild. The rolling release model means affected versions may already be in production without clear patch guidance.

Casky.ai's 323 mapped security skills detect this attack through Claude AI's analysis of MITRE ATT&CK techniques TA0001 (Initial Access) and TA0043 (Reconnaissance), identifying characteristic SQL injection patterns in HTTP requests to updatedetailsfromstudent.php. Practitioners using Casky would observe detection signatures flagging: unsanitized parameter inputs in database queries (CWE-89), improper neutralization of special elements in SQL commands (CWE-74), suspicious SQL syntax in web logs such as UNION-based queries or time-based blind injection attempts in the 'eno' field, and database error messages leaking schema information. The platform's extended reasoning capabilities would correlate these indicators with publicly available exploit code patterns, enabling security teams to identify active reconnaissance or exploitation attempts targeting their CloudClassroom deployments before successful compromise.

Live Threat IntelligenceComing soon

Casky Risk Score

—

EPSS Probability

—

Shodan Exposure

—

GreyNoise Signal

—

Composite risk scoring from EPSS, CISA KEV, Shodan, and GreyNoise — 21 security APIs correlated into a single Casky Risk Score. Coming in Casky Pro. Join early access →

323 Casky skills cover this attack pattern

These skills use Claude AI's reasoning model to surface findings in the same attack categories as CVE-2026-100314.

Abuse of Public-Facing API: Mobile API Abuse

mobile security · low

Run

abusing-dpapi-for-credential-access

red teaming · high

Run

abusing-shadow-credentials-for-privesc

red teaming · high

Run

MITRE ATT&CK Techniques

TA0001 TA0043

Investigate the attack patterns behind CVE-2026-100314

Casky has 323 skills that investigate the attack patterns behind CVE-2026-100314. Run one and get CVSS-scored findings in 3 minutes.

Run the skill that detects this →

X Instagram LinkedIn