This vulnerability allows an attacker to perform SQL injection by manipulating the squeryx argument in the /askquery.php file of CodeAstro Online Classroom 1.0. The attack vector is remote network access with low attack complexity and no user interaction required. The CVSS 4.0 base score is 5.3, indicating a medium severity impact with limited confidentiality, integrity, and availability impacts. No official fix or patch has been documented, and the vendor has not provided remediation details.

Successful exploitation could allow an attacker to execute unauthorized SQL commands on the backend database, potentially leading to unauthorized data access or modification. However, the impact is rated medium with limited scope and impact on confidentiality, integrity, and availability. There is no evidence of active exploitation in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should consider implementing web application firewall (WAF) rules to detect and block SQL injection attempts targeting the squeryx parameter. Restricting database permissions and input validation may also reduce risk, but these are temporary mitigations.