Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
CVE-2025-44608 — CVE-2025-44608 | Kitploit
Tools/GitHubGitHub/mr-xmen786/cve-2025-44608
Vulnerability AnalysisCode AnalysisExploitationWeb Application ExploitationPenetration Testing
GitHubmr-xmen786/cve-2025-44608

CVE-2025-44608

CVE-2025-44608

View Repository
1 year agoNot yet reviewed

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share

CVE-2025-44608

CloudClassroom-PHP Project v1.0 is vulnerable to RCE via SQL Injection.

Vendor: https://github.com/mathurvishal/CloudClassroom-PHP-Project

Software Link: https://github.com/mathurvishal/CloudClassroom-PHP-Project/archive/refs/heads/master.zip

PoC

Step 1: Navigate to the affected URL and modify the ?viewid=1 parameter by appending a single quote ('). Upon doing so, the application returns an SQL error, indicating a possible SQL injection vulnerability. Using the SQLmap tool, I successfully exploited this vulnerability. Through the SQL injection, I was able to upload a malicious PHP file to the server. Once uploaded, I used the PHP file to execute system commands, confirming remote code execution (RCE) on the target system.

1 2

3

45

Uploading 5.PNG…

6

7

8

Download Tool