CVE-2026-7148

In the file /OnlineClassroom/loginlinkadmin.php of CodeAstro Online Classroom 1.0, there is an SQL injection vulnerability via the aid argument. The attack can be performed remotely, and the exploit is publicly available.

A security flaw has been discovered in CodeAstro Online Classroom 1.0. This vulnerability affects unknown code of the file /askquery.php. The manipulation of the argument squeryx results in SQL injection. The attack may be performed from remote. The exploit has been released to the public and may be used for attacks.

A vulnerability was determined in CodeAstro Online Classroom 1.0. This impacts an unknown function of the file /OnlineClassroom/facultydetails. This manipulation of the argument deleteid causes sql injection. It is possible to initiate the attack remotely. The exploit has been publicly disclosed and may be utilized.

A vulnerability was found in CodeAstro Online Classroom 1.0, affecting an unknown function of the /OnlineClassroom/addnewstudent file. Manipulation of the fname argument results in SQL injection, and the attack may be performed remotely. The exploit has been made public and could be used.

A vulnerability was found in CodeAstro Online Classroom 1.0 in an unknown function of the /OnlineClassroom/studentdetails file. Manipulating the deleteid argument leads to SQL injection. The attack can be performed remotely and the exploit has been publicly disclosed.

A flaw was found in CodeAstro Online Classroom 1.0 in an unknown function of the /OnlineClassroom/facultylogin file. Manipulating the fid argument can lead to SQL injection. The attack can be executed remotely and the exploit has been published.

A vulnerability was detected in CodeAstro Online Classroom 1.0. Impacted is an unknown function of the file /OnlineClassroom/studentlogin. Performing a manipulation of the argument sid results in sql injection. Remote exploitation of the attack is possible. The exploit is now public and may be used.

SQL Injection vulnerability in CodeAstro Online Classroom 1.0. Manipulation of the deleteid argument in /guestdetails allows remote SQL injection.

A vulnerability was found in CodeAstro Online Classroom 1.0 in /updatedetailsfromstudent.php. Manipulating the fname argument leads to SQL injection. The attack can be performed remotely and a public exploit exists.

A security flaw has been discovered in CodeAstro Online Classroom 1.0/2.php. Affected by this vulnerability is an unknown functionality of the file /OnlineClassroom/takeassessment2.php?exid=14. Performing a manipulation of the argument Q1 results in sql injection. Remote exploitation of the attack is possible. The exploit has been released to the public and may be used for attacks.