CVE-2025-26198

CRITICAL LAB

CloudClassroom-PHP-Project v1.0 - Unauthenticated SQL Injection via Admin Login Username Field

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 2 public exploits for CVE-2025-26198. PoCs published by WailYacoubi9, tansique-17.

AI-analyzed exploit summary This repository contains a functional proof-of-concept for CVE-2025-26198, demonstrating SQL injection vulnerabilities in CloudClassroom-PHP-Project v1.0. It includes both vulnerable and patched versions of the code, along with Python scripts to exploit the vulnerability using multiple SQL injection techniques.

Description

CloudClassroom-PHP-Project v1.0 contains a critical SQL Injection vulnerability in the loginlinkadmin.php component. The application fails to sanitize user-supplied input in the admin login form before directly including it in SQL queries. This allows unauthenticated attackers to inject arbitrary SQL payloads and bypass authentication, gaining unauthorized administrative access. The vulnerability is triggered when an attacker supplies specially crafted input in the username field, such as ' OR '1'='1, leading to complete compromise of the login mechanism and potential exposure of sensitive backend data.

Exploits (2)

nomisec WORKING POC
by WailYacoubi9 · poc
https://github.com/WailYacoubi9/CVE-2025-26198

This repository contains a functional proof-of-concept for CVE-2025-26198, demonstrating SQL injection vulnerabilities in CloudClassroom-PHP-Project v1.0. It includes both vulnerable and patched versions of the code, along with Python scripts to exploit the vulnerability using multiple SQL injection techniques.

Classification
Working Poc 100%
Attack Type
Sqli
Complexity
Trivial
Reliability
Reliable
Target: CloudClassroom-PHP-Project v1.0
No auth needed
Prerequisites: Docker and Docker Compose · Python 3.x with requests library
devstral-2 · analyzed Feb 16, 2026 Full analysis →
nomisec WRITEUP
by tansique-17 · poc
https://github.com/tansique-17/CVE-2025-26198

This repository contains a detailed writeup for CVE-2025-26198, a critical SQL injection vulnerability in CloudClassroom-PHP-Project v1.0. The vulnerability allows unauthenticated attackers to bypass authentication via SQL injection in the login mechanism.

Classification
Writeup 100%
Attack Type
Sqli
Complexity
Trivial
Reliability
Reliable
Target: CloudClassroom-PHP-Project v1.0
No auth needed
Prerequisites: Access to the login endpoint of the vulnerable application
devstral-2 · analyzed Feb 16, 2026 Full analysis →

References (2)

Core 2

Scores

CVSS v3 9.8
EPSS 0.0057
EPSS Percentile 42.6%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment
Exploitation poc
Automatable yes
Technical Impact total

Details

CWE
CWE-89
Status published
Products (1)
vishalmathur/cloudclassroom-php_project 1.0
Published Jun 18, 2025
Tracked Since Feb 18, 2026