Threats tagged 'ghsa-qhmp-m8h2-qfmp'

CodeAstro Online Classroom 1.0 contains a SQL injection vulnerability in an unknown function within the /OnlineClassroom/facultylogin file. The vulnerability arises from improper handling of the 'fid' argument, allowing remote attackers to manipulate SQL queries. Exploit code has been published, but there is no indication of active exploitation in the wild. The vulnerability has a medium severity rating with a CVSS score of 6.3.