Threats affecting pkg:github/zgr0508/cve

CVE-2026-5579 is a medium severity SQL injection vulnerability in CodeAstro Online Classroom version 1.0. It affects the parameter 'fname' in the file /OnlineClassroom/updatedetailsfromfaculty.php, allowing remote attackers to manipulate SQL queries. The vulnerability has been publicly disclosed but no official patch or remediation guidance is currently available. Exploitation requires low privileges and no user interaction. The impact includes potential unauthorized database access or modification. No known exploits in the wild have been reported yet.

CVE-2026-5578 is a medium severity SQL injection vulnerability in CodeAstro Online Classroom version 1.0. It affects the parameter 'deleteid' in the /OnlineClassroom/addassessment.php file, allowing remote attackers to manipulate this argument to perform SQL injection. The vulnerability has been publicly disclosed, but no official patch or remediation guidance has been provided by the vendor. Exploitation requires low privileges and no user interaction, with limited scope and impact as per the CVSS vector.