This vulnerability in CodeAstro Online Classroom 1.0 involves SQL injection via the 'deleteid' parameter in the /OnlineClassroom/facultydetails endpoint. An attacker can remotely exploit this flaw to inject malicious SQL commands due to insufficient input validation or sanitization. The CVSS 4.0 base score is 5.3, reflecting medium severity with network attack vector, low attack complexity, no user interaction required, and limited impact on confidentiality, integrity, and availability. No official fix or patch has been published as of the data provided.

Successful exploitation could allow an attacker to execute arbitrary SQL commands on the backend database, potentially leading to unauthorized data access or modification. However, the impact is rated as limited in confidentiality, integrity, and availability, indicating partial or constrained effects. There is no evidence of active exploitation in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should consider implementing input validation or web application firewall rules to detect and block suspicious SQL injection attempts targeting the 'deleteid' parameter. Monitor vendor communications for updates on patches or official mitigations.