Threats tagged 'ghsa-f8xj-hc8g-wqw9'

CodeAstro Online Classroom 1.0 contains a SQL injection vulnerability in the /OnlineClassroom/studentdetails endpoint via the deleteid parameter. This vulnerability allows remote attackers with low privileges to manipulate SQL queries, potentially impacting confidentiality, integrity, and availability. Public exploit code has been disclosed. No patch or remediation information is currently available.