Threat Intelligence Database

CVE-2026-7744 is a medium-severity SQL injection vulnerability in CodeAstro Online Classroom version 1.0. The flaw exists in an unspecified function within the /OnlineClassroom/addnewstudent file, where manipulation of the 'fname' parameter allows SQL injection. This vulnerability can be exploited remotely without user interaction or elevated privileges. Although the exploit code has been publicly disclosed, there are no known exploits observed in the wild. No official patch or remediation guidance has been provided by the vendor at this time.

A vulnerability has been found in CodeAstro Online Classroom 1.0. The impacted element is an unknown function of the file /OnlineClassroom/studentdetails. The manipulation of the argument deleteid leads to sql injection. The attack is possible to be carried out remotely. The exploit has been disclosed to the public and may be used.

A flaw has been found in CodeAstro Online Classroom 1.0. The affected element is an unknown function of the file /OnlineClassroom/facultylogin. Executing a manipulation of the argument fid can lead to sql injection. The attack can be executed remotely. The exploit has been published and may be used.

A vulnerability was detected in CodeAstro Online Classroom 1.0. Impacted is an unknown function of the file /OnlineClassroom/studentlogin. Performing a manipulation of the argument sid results in sql injection. Remote exploitation of the attack is possible. The exploit is now public and may be used.

CVE-2026-7196 is a medium severity SQL injection vulnerability in CodeAstro Online Classroom version 1.0. It affects an unknown function in the /guestdetails file where the deleteid argument can be manipulated to perform SQL injection attacks remotely. The vulnerability has been publicly disclosed but there are no known exploits in the wild. No official patch or remediation guidance is currently available from the vendor.

CVE-2026-6033 is a medium severity SQL injection vulnerability in CodeAstro Online Classroom version 1.0. It affects an unknown function in the file /updatedetailsfromstudent.php via manipulation of the 'fname' parameter. The vulnerability can be exploited remotely without user interaction or elevated privileges. Although the exploit has been publicly disclosed, there are no known exploits in the wild at this time. No official patch or remediation guidance has been provided by the vendor yet.

A security flaw has been discovered in CodeAstro Online Classroom 1.0/2.php. Affected by this vulnerability is an unknown functionality of the file /OnlineClassroom/takeassessment2.php?exid=14. Performing a manipulation of the argument Q1 results in sql injection. Remote exploitation of the attack is possible. The exploit has been released to the public and may be used for attacks.

CVE-2026-5580 is a medium severity SQL injection vulnerability in CodeAstro Online Classroom version 1.0. The issue exists in the /OnlineClassroom/addvideos.php file within the Parameter Handler component, where the 'videotitle' argument can be manipulated to perform SQL injection. This vulnerability can be exploited remotely without user interaction. No official patch or remediation guidance is currently available, and no known exploits are reported in the wild.