Threats tagged 'ghsa-34v6-h57v-gx5f'

CodeAstro Online Classroom 1.0 contains a SQL injection vulnerability in the /askquery.php file via the squeryx parameter. This flaw allows remote attackers with low privileges to manipulate SQL queries, potentially impacting confidentiality, integrity, and availability. Public exploit code is available, increasing the risk of exploitation. No specific affected versions beyond 1.0 are stated, and no patch information is provided.