CVE-2026-7743

MEDIUM

CodeAstro Online Classroom studentdetails sql injection

Title source: cna
STIX 2.1

Description

A vulnerability has been found in CodeAstro Online Classroom 1.0. The impacted element is an unknown function of the file /OnlineClassroom/studentdetails. The manipulation of the argument deleteid leads to sql injection. The attack is possible to be carried out remotely. The exploit has been disclosed to the public and may be used.

References (5)

Core 5
Core References
Vdb Entry, Technical Description vdb-entry technical-description
VDB-360918 | CodeAstro Online Classroom studentdetails sql injection
https://vuldb.com/vuln/360918
Signature, Permissions Required signature permissions-required
VDB-360918 | CTI Indicators (IOB, IOC, TTP, IOA)
https://vuldb.com/vuln/360918/cti
Third Party Advisory third-party-advisory
Submit #807695 | codeastro Online Classroom V1.0 SQL Injection
https://vuldb.com/submit/807695
Product product
https://codeastro.com/

Scores

CVSS v3 6.3
EPSS 0.0024
EPSS Percentile 15.0%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

CISA SSVC

Vulnrichment
Exploitation poc
Automatable no
Technical Impact partial

Details

CWE
CWE-74 CWE-89
Status published
Products (1)
CodeAstro/Online Classroom 1.0
Published May 04, 2026
Tracked Since May 04, 2026