Approved changes feed: RSS · Atom

cpe:2.3:a:codeastro:online_classroom:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorCodeastro (f92dc1fe-f2d7-58ad-92b0-40a98a9042be)
ProductOnline Classroom (a0ac3f2e-1946-545a-888c-f3bc947a0816)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-8097 vulnerable 2026-06-03 15:27:57.627735 CodeAstro Online Classroom askquery.php sql injection
MEDIUM (6.3)
A security flaw has been discovered in CodeAstro Online Classroom 1.0. This vulnerability affects unknown code of the file /askquery.php. The manipulation of the argument squeryx results in sql injection. The attack may be performed from remote. The exploit has been released to the public and may be used for attacks.
Published: 2026-05-07T20:15:12.699Z
Updated: 2026-05-08T13:53:30.465Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-7745 vulnerable 2026-06-03 15:27:57.243989 CodeAstro Online Classroom facultydetails sql injection
MEDIUM (6.3)
A vulnerability was determined in CodeAstro Online Classroom 1.0. This impacts an unknown function of the file /OnlineClassroom/facultydetails. This manipulation of the argument deleteid causes sql injection. It is possible to initiate the attack remotely. The exploit has been publicly disclosed and may be utilized.
Published: 2026-05-04T07:45:11.285Z
Updated: 2026-05-04T12:47:29.054Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-7744 vulnerable 2026-06-03 15:27:57.243792 CodeAstro Online Classroom addnewstudent sql injection
MEDIUM (6.3)
A vulnerability was found in CodeAstro Online Classroom 1.0. This affects an unknown function of the file /OnlineClassroom/addnewstudent. The manipulation of the argument fname results in sql injection. The attack may be performed from remote. The exploit has been made public and could be used.
Published: 2026-05-04T07:30:13.668Z
Updated: 2026-05-05T18:10:47.678Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-7743 vulnerable 2026-06-03 15:27:57.243526 CodeAstro Online Classroom studentdetails sql injection
MEDIUM (6.3)
A vulnerability has been found in CodeAstro Online Classroom 1.0. The impacted element is an unknown function of the file /OnlineClassroom/studentdetails. The manipulation of the argument deleteid leads to sql injection. The attack is possible to be carried out remotely. The exploit has been disclosed to the public and may be used.
Published: 2026-05-04T07:15:10.911Z
Updated: 2026-05-05T00:58:34.519Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-7742 vulnerable 2026-06-03 15:27:57.243255 CodeAstro Online Classroom facultylogin sql injection
MEDIUM (6.3)
A flaw has been found in CodeAstro Online Classroom 1.0. The affected element is an unknown function of the file /OnlineClassroom/facultylogin. Executing a manipulation of the argument fid can lead to sql injection. The attack can be executed remotely. The exploit has been published and may be used.
Published: 2026-05-04T07:00:15.853Z
Updated: 2026-05-04T10:33:28.119Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-7741 vulnerable 2026-06-03 15:27:57.242968 CodeAstro Online Classroom studentlogin sql injection
MEDIUM (6.3)
A vulnerability was detected in CodeAstro Online Classroom 1.0. Impacted is an unknown function of the file /OnlineClassroom/studentlogin. Performing a manipulation of the argument sid results in sql injection. Remote exploitation of the attack is possible. The exploit is now public and may be used.
Published: 2026-05-04T06:45:11.689Z
Updated: 2026-05-04T12:46:32.316Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-7196 vulnerable 2026-06-03 15:27:56.311625 CodeAstro Online Classroom guestdetails sql injection
MEDIUM (6.3)
A security vulnerability has been detected in CodeAstro Online Classroom 1.0. Affected is an unknown function of the file /guestdetails. Such manipulation of the argument deleteid leads to sql injection. The attack may be performed from remote. The exploit has been disclosed publicly and may be used.
Published: 2026-04-27T23:00:20.080Z
Updated: 2026-04-28T14:35:24.217Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-7148 vulnerable 2026-06-03 15:27:56.245934 CodeAstro Online Classroom addnewfaculty sql injection
MEDIUM (6.3)
A flaw has been found in CodeAstro Online Classroom 1.0. This affects an unknown part of the file /addnewfaculty. Executing a manipulation of the argument fname can lead to sql injection. The attack can be executed remotely. The exploit has been published and may be used.
Published: 2026-04-27T18:30:15.485Z
Updated: 2026-04-27T20:12:45.919Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-6033 vulnerable 2026-06-03 15:27:54.663264 CodeAstro Online Classroom updatedetailsfromstudent.php sql injection
MEDIUM (6.3)
A vulnerability was determined in CodeAstro Online Classroom 1.0. Affected is an unknown function of the file /updatedetailsfromstudent.php?eno=146891650. Executing a manipulation of the argument fname can lead to sql injection. The attack may be performed from remote. The exploit has been publicly disclosed and may be utilized.
Published: 2026-04-10T07:30:13.796Z
Updated: 2026-04-10T12:59:53.115Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-6010 vulnerable 2026-06-03 15:27:54.625446 CodeAstro Online Classroom takeassessment2.php sql injection
MEDIUM (6.3)
A security flaw has been discovered in CodeAstro Online Classroom 1.0/2.php. Affected by this vulnerability is an unknown functionality of the file /OnlineClassroom/takeassessment2.php?exid=14. Performing a manipulation of the argument Q1 results in sql injection. Remote exploitation of the attack is possible. The exploit has been released to the public and may be used for attacks.
Published: 2026-04-10T03:30:14.967Z
Updated: 2026-04-14T03:18:56.594Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-5580 vulnerable 2026-06-03 15:26:27.356473 CodeAstro Online Classroom Parameter addvideos.php sql injection
MEDIUM (6.3)
A vulnerability was identified in CodeAstro Online Classroom 1.0. Impacted is an unknown function of the file /OnlineClassroom/addvideos.php of the component Parameter Handler. The manipulation of the argument videotitle leads to sql injection. It is possible to initiate the attack remotely. The exploit is publicly available and might be used.
Published: 2026-04-05T16:15:11.717Z
Updated: 2026-04-07T02:54:41.665Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-5579 vulnerable 2026-06-03 15:26:27.356167 CodeAstro Online Classroom Parameter updatedetailsfromfaculty.php sql injection
MEDIUM (6.3)
A vulnerability was determined in CodeAstro Online Classroom 1.0. This issue affects some unknown processing of the file /OnlineClassroom/updatedetailsfromfaculty.php?myfid=108 of the component Parameter Handler. Executing a manipulation of the argument fname can lead to sql injection. The attack may be performed from remote. The exploit has been publicly disclosed and may be utilized.
Published: 2026-04-05T16:00:17.588Z
Updated: 2026-04-06T16:16:05.979Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-5578 vulnerable 2026-06-03 15:26:27.355704 CodeAstro Online Classroom Parameter addassessment.php sql injection
MEDIUM (6.3)
A vulnerability was found in CodeAstro Online Classroom 1.0. This vulnerability affects unknown code of the file /OnlineClassroom/addassessment.php of the component Parameter Handler. Performing a manipulation of the argument deleteid results in sql injection. The attack is possible to be carried out remotely. The exploit has been made public and could be used.
Published: 2026-04-05T15:45:11.471Z
Updated: 2026-04-06T18:06:49.923Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.